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SUBCOURSE OVERVIEW 


This subcourse is designed to teach you, the counterintelligence (CI) Special 
Agent, the rationale and doctrine concerning the authority, jurisdiction, and scope 
for initiating all CI cases; the proper procedures for the conduct of selected CI 
investigations; and the recommended techniques for the handling of physical 
evidence. 


There are no prerequisites for this subcourse. 


= 


This subcourse reflects the doctrine which was current at the time the subcourse 
was prepared. In your own work situation, always refer to the latest publications. 


iq 


The words "he," "him', "his," and "men", when used in this publication, represent 
both the masculine and feminine genders unless otherwise stated. 


WW 
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ERMINAL LEARNING OBJECTIVE 


ACTION: You will identify the purpose, scope, jurisdiction, as well as the 
administrative responsibilities, authority, and functions for all CI 
investigations; learn proper procedures for the conduct of 
complaint-type investigations (CTI); and, when applicable, initiate 
and coordinate the collection of physical evidence for possible use 
in judicial proceedings. 


CONDITIONS: Given narrative information and illustrations from FM 34-60, FM 34- 
60A(S), FM 19-20 and AR 380-67, AR 381-20, and AR 195-2. 


STANDARDS: To demonstrate competency of this task, you must achieve a minimum 
of 70% on the subcourse examination. 


** NOTE** The Defense Investigative Service (DIS), is now the Defense Security 
Service DSS. This change will be made in the subcourse when it is revised. 
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you will learn the rationale and applicable doctrine concerning the 
terintelligence (CI) investigations to include the authority, 

scope, and the administrative functions for all phases 
tion. 
NG OBJECTIVE 
Describe the functions of the Personnel Security Central Clearance 
Facility (CCF) and other applicable control offices; identify and 
perform the administrative responsibilities for all phases of a CI 
investigation; and state the doctrine, scope criteria, and purpose 
for the initiation of an investigation. 
You will be given narrative information and illustrations from FM 
34-60. 
You will initiate, perform all administrative functions, and properly 


record the results of both favorable and unfavorable CI 
investigations IAW with the provisions of FM 34-60. 


The material contained in this 


publicati 


AR 
AR 
AR 
AR 
FM 


380-5, 
381-10 
381-20 
380-67 
34-60, 


ons: 


Lf 
, 


, 


lesson was derived from the following 
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This lesson has two parts: 


Part A: Purpose, Scope, Jurisdiction and Authority for CI investigations. 


Part B: Source of Investigation Requests, Control Offices, and Function of The 


Personnel Security Central Clearance Facility (CCF). 


PART A: PURPOSE, SCOPE, JURISDICTION AND AUTHORITY 


FOR CI INVESTIGATIONS 


PURPOSE OF CI INVESTIGATIONS. CI investigations are aimed at the detection, 
prevention, and neutralization of actual or potential threats to the security of 


the command and the Army, regardless of whether criminal activity is involved. 
Although prosecution of the offenders may be the natural consequence of some CI 
investigations, the primary objective is the security of the command. Many 


operations of CI units must be coordinated carefully with those 


of military police 


(MP) investigative units and other intelligence and security agencies. This 
coordination will prevent operations of one agency from having a negative effect on 


or compromising the operations of another. 


SCOPE OF INVESTIGATIONS. It is Department of the Army (DA) policy that a CI 


investigation will be limited in scope to the minimum amount of 
obtain adequate information on which to base an adjudication or 
care and minimum use of covert investigative techniques will be 
when authorized to investigate nonaffiliated United States (US) 


assets necessary to 
decision. Special 
used, particularly 
citizens and 


organizations. When the use of such techniques is contemplated, the legal officers 


of the US Army Intelligence and Security Command (INSCOM) must be consulted to 


ensure the action is in conformance with Army Regulations (AR), 


and if applicable, the laws of the host foreign country. When any legal doubt 


federal statutes, 


exists, prior approval must be requested from the Deputy Chief of Staff for 


Intelligence, DA (DCSINT, DA). 
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tion 


All CI investigators and supervisors must understand that a legal distinct 
exists between an investigation involving foreign intelligence agenci 
routine investigation involving US citizens or allied foreign nationals. 

general rule, use of covert techniques is prohibited in routine investiga 


s anda 


Asa 
tions 


involving citizens of the US or allied foreign nations. 


Information developed during the course of any CI 
involvement by a foreign intelligence servic 
secure means available, consistent with the "need to know" principles, 
Control Officer (ACCO). 


to 


~ 
, 


ARMY JURISDICTION. 
of Naval Criminal Investigative Service 
Investigations, (OSI), Inspector General, 
Investigation (FBI). 
Agreement". It establishes the responsibilities of the signatories for 
investigating all activities coming under the categories of espionage, 
counterespionage, criminal subversion, and sabotage. 
upon all US Army investigative agencies. 


An agreement was entered into in 1949 by DCSIN' 
(NCIS) US Navy; 
US Air Force; 


Gi 
ae 


NOT 


DCSINT, DA is responsible fo 


* q 


The investigation and disposal of all 
counterespionage, criminal subversion, 
retired Army military personnel. 


cases of espionage, 


n 


of all cases in thes 


ONI has been redesignated as the Naval Criminal Investigative Service 


investigation that indicates 
must be reported by the fastest 


Army Case 


DA; the Office 
the Office of Special 

and the Federal Bureau of 
This agreement is commonly known as the "Delimitations 


This agreement is binding 


(NCIS). 


and sabotage involving active and 


The disposal, but not investigation, 
involving Army civilian employees in the US, 
Islands. 


Puerto Rico, 


n 


The investigation and disposal of all 
Army Civilian employees stationed in areas other 
and the Virgin Islands, 
ramifications in the US, 


cases in thes 
than the US, 


Puerto Rico, or the Virgin Islands. 


n 


The investigation of all 


cases in these categories 


categories 
and the Virgin 


categories involving 
Puerto Rico, 
except part of such investigations as have 


involving civilians and 


foreign nationals who a not employees of the other subscribing 
organizations, in areas wher 


over the Armed Forces stationed therein, 


the Army commander has supreme jurisdiction 
including possessions of the US 


other than Puerto Rico and the Virgin Islands. 
* Informing the other subscribing organizations of any important 
developments. 
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PART B: SOURCE OF INVESTIGATION REQUESTS, 
CONTROL OFFICES, AND FUNCTION OF CCF 


SOURCE OF INVESTIGATION REQUESTS. The mission of CI elements and units is "the 
detection, identification, assessment, counter, neutralize, or exploit threat 
intelligence collection efforts. 


In fulfillment of this mission, CI personnel and units engage in a broad range of 
operations with direction and guidance from higher authorities within their areas 
of operations. Some of those activities which may be termed "force protection", 
include the following: 


* Safeguarding defense information. 


x Assessing vulnerabilities and recommending solutions for Army facilities 
which have classified defense contracts or have been designated as key 
defense installations. 


* Conducting CI surveys, inspections and services. 

* Conducting two types of investigations. 

* CI Investigations (Aka: SAEDA) and personnel security investigations 
(PST). 


A Counterintelligence Investigation (CII) is one in which sabotage, espionage, 
spying, treason, sedition, or subversion, FIS directed sabotage, activity is 
suspected or alleged because of the receipt or development of credible derogatory 
information. The primary purpose of each CII is to identify, neutralize and 
exploit information of such a nature form and reliability that may determine the 
extent and nature of action, if any, is necessary to counteract the threat and 
enhance security. CII may have various origins, but generally originate from four 
common sources: 


Signal Scope Background Investigation (SSBI). During the conduct of a routine SSBI 
by the Defense Investigative Service (DIS), credible derogatory information 
reflecting on subject's loyalty is investigated. 


As a result, the investigation classification will be changed from that of a SSBI 
to CII. DIS will dispose of the case IAW its charter, Department of Defense (DOD) 
Directive 5105.42. DIS has the option to run the investigation or refer the cas 


to the appropriate investigative agency. CI has investigative jurisdiction, as 
well as case dispositions, for CII involving active or retired members of the U.S. 
Army and DOD civilians working overseas. The FBI has jurisdiction for DOD 


Civilians employed within the Continental United States (CONUS). 


NOTE: The SSBI will NOT be changed to a CII if the information reflects adversely 
on subject's suitability; that is, integrity, discretion, morals, or character. 


CI Walk-In Interview. A walk-in is an individual who seeks out CI Agents to 
volunteer information which is believed to be of intelligence value. When an 
individual reports activity that falls within the scope of a CII to an intelligence 
unit or other military organization, this information is immediately reported to 
sub-control offices who have authority to initiate a CII. The CII would be 
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conducted by the appropria 
individual 


ts of the investigation. 


Reports From Other Intelligence and Security Agencies. 


Leads Obtained Directly From Sources Used in Special Operations. 


te investigative agency having jurisdiction over the 
being investigated. DIS could be requested to conduct all or part 
the military component 


OF 


CII's are generally incident investigations concerning acts or activities which are 
committed by, or involving known or unknown persons or groups. 


Initiation of a CIl. 


CII on individuals under the jurisdiction of the Army will be initiated only by: 


* 


* 


CONUS Investigations. 
forward request 


US Army Intelligence and Security Command (INSCOM) ACCO. 


Sub-control offices overseas. 


Direction of higher authority. 


Within CONUS, major commands, agencies, and activities 


ts for initiation of CII to INSCOM. When a CI, which was not 


will 


requested by a major command (MACOM), agency, or activity, is initiated by one of 
the services, the appropriate command will be notified through intelligence 
channels. During the course of a CII, the control officer will keep the MACOM 


informed of the progress of the case. 


NOTE: 


will be responsible for its own internal security. CII on individuals under 
the U.S. Army will be initiated only by U.S. Army agencies. 


jurisdiction of 


The Delimitations Agreement of 1949 emphasizes that each military service 


the 


Overseas Investigations. In overseas areas, the responsibility for investigation 


of the agreed categories rests with the military service that is in supreme command 
of the area. This procedure is subject to coordination with the Central 
Intelligence Agency (CIA) and agreements with other DOD intelligence components and 
host government agencies, IAW AR 381-20. Normally, the Army will be the suprem 
authority in an area of operations or postwar zone of occupation and will have the 
investigative responsibility of espionage, sabotage, and subversion committed by 


any individual 
of other mil 


area and will be able 


prior agreement with such services, the Army will become responsible for and 


conduct 


t all such investigations. 


"What is derogatory information?" 


Para 1-304.3, AR 380-67, defines derogatory information as: 


in the area. The one exception is personnel under the jurisdiction 
litary services in the area. This exception is based upon the 
assumption that the CI agencies of the Navy and Air Force are operational 
to take care of their own personnel. If they are not, by 


in the 
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"Information that constitutes a possible basis for taking an adverse or 
unfavorable personnel security action." 


ea) 


a. Adverse loyalty information (see para 2-200 a-f, 2-200k and Appendix 
para 3, AR 380-67). 


b. Adverse Suitability information (see para 2-200g-j and 2-200 1-q, Appendix 
, para, 1, 2, 4, 5, and 6, AR 380-67). 


c. Appendix I, AR 380-67 discusses the adjudication policy. It provides 
“Disqualifying Factors” - some types of serious conduct that can justify a 
determination to deny or revoke and individuals eligibility for access to 
classified information. 


If the individual is a member of the U.S. Army, action may be taken to suspend 
favorable personnel action concerning him until the investigation is completed. 
This action will be initiated under the provisions of: 


Paragraph 6, AR 600-31, Suspension of Favorable Personnel Actions for 
Military Personnel in National Security Cases and Other Investigative 
Procedures. 


Chapter 4, AR 604-10, Military Personnel Security Program. 


Under the individual flagging action, many personnel actions will be suspended: 
promotions; appointment, enlistment, reappointment or reenlistment; discharge or 
normal release from active duty; entry on active duty; awards, decorations, or 
commendations; retirement; security access; attendance at servic ducation or 
training programs; requests for excess leave; and reassignment, except when cogent 
reasons exist and then only within the command. 


Significant derogatory information: 


SUB-CONTROL OFFICES (SCO). Within DA, the DCSINT has staff responsibility for all C 
I investigative activities. DCSINT formulates policy for the conduct, management, 
direction, and control of CI operations. 


Administration and control of CI investigations - special operations, and 
counterespionage project ar xercised by INSCOM, through ACCO. The ACCO exercises 
overall control and coordination of MI Army CII, and ultimate case control. Within 
a geographic area or region, INSCOM maintains control of CI, investigative 
activities through the SCO established in theater support brigades. 


CII are initiated only by the responsible SCO. The following SCOs are responsible 
for all Army CII investigations and operations within their geographic areas: 


* Deputy Chief of Staff for Intelligence (DCSINT), US Army Europe (USAREUR) , 
for the Commander-in-Chief USAREUR area of responsibility (G2, USAREUR). 
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* 501lst Military Intelligence (MI) Brigade (Bde), for the Commander, Eight 
US Army (EUSA) area of responsibility. 


% S2s for the Commanders, 470th, 500th, and 902nd Military Intelligence 
Brigades. 


% Commander, FCA, USAINSCOM, for all other areas. 


Major commands (MACOM), agencies, and activities within CONUS will forward requests 
for initiation of CII to the appropriate SCO. 


When a CII, which was not requested by another MACOM, agency, or activity is 
initiated by a SCO, the appropriate command is notified through intelligence 
channels. 


During a CII, the SCO will keep the major commander informed concerning the 
progress of the case. 


CENTRAL PERSONNEL SECURITY CLEARANCE FACILITY (CCF 


Jurisdiction. The Secretary of the Army delegated the authority to grant, deny, or 
revoke security clearances for access to classified defense information to the 

Commander, U.S. Army CCF, under the provisions of DA General Order Number 14, dated 
27 July 1977. 


The DCSINT, DA, delegated the authority to grant, deny, or revoke access to 
Sensitive Compartmented Information (SCI) to the Commander, U.S. Army CCF, under 
CCF, in DAMI-DOS letter, dated 3 October 1977. 


This authority applies to the following DA personnel: 


1. US Army, DA and contractor personnel affiliated with the Department of 
Defense and the Army. 


2. Persons employed, hired on an individual basis, or serving on an advisory 
or consulting basis for whom Army personnel security clearances are required, 
whether or not such persons are paid from appropriate or nonappropriated funds. 


3. Employees of the Army National Guard, Army-Air Force Exchange Service 
(AAFES), American Red Cross, United Service Organization (USO) who are required 
to have Army personnel security clearance. 


4. Reserve Components and National Guard personnel not on active duty. 
5. Members of the Reserve Officers Corps. 


The above includes U.S. citizens who are native born, naturalized, derivative birth 
and derivative naturalization. 


Responsibilities. The commander, CCF, is the only person designated to deny, 
revoke, or restore access when suspended by the local commander. CCF monitors the 
progress of all 
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actions taken concerning the revocation of security clearances and stores all 


reports relating to the securit 


Whenever 
element, 


organization to which 


security 


and completeness. I 
additional 


ty clearances of personnel under its jurisdiction. 


derogatory information is developed or becomes available to any DOD 


shall be referred 
the individual 


zig oe 


review 
further informa 
ion should be 


officer shall 


ct Fh 


investiga 


Vhen the 


forward 


commande 


that falls into 
timely manner 


Follow-up will 


Final action. At the conclusion of 
Forwarded to CCF that must contain re 
board actions and recommendations of 


Commander learns of derogato 
the scope of para 2-2 
DA Form 5248-R to Commander C 
and will indicate detai 


r Or appropriate authority 


personnel actions while waiting final 


CCF being informed by 
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When CCF 


clearance and or access 
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the informat 
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00, 
CF. 


be submitted at 90 day int 
fF the command action, 
ts of any local 
command concerning restoration or 
Commanders will not delay any 


sult 
the 


act 


AR 380-67, 


1 information and actions being 
(iv6+, 


to the commander or security offices at the 
is assigned for duty. 
tion in terms of its security significance 
is needed to confirm or disprove, 


7 


The commander or 


ry information on a member of his/her command 
the commander will immediately 
DA Form 5288 will be submitted ina 


taken by the 


conducting an inguiry or investigation). 


tervals if the commander has 


not taken 
a final report will be 
or 


revocation of the individuals security clearance. 
tion by CCF. 


DA Form 5248-R. 


If 
clearance, 


a personnel fil 
commanders must s 


clearance at a later date. 


does not indicat 
till report 
scope of para 2-200, AR 380-67, since 
] Only a final report 


th 


inquiry, investigations, 


Actions should proceed with 


of a security 


Cenc 


information that falls into the 
the person may require a security 


t is required. 


Suspend individual's access on an "informal" basis while gathering 


information 


to determine a formal suspension is warranted and forward all 


derogatory information to CCF on DA Form 5248-R with the commander's 


recommendation. 


If the commander does not suspend access, 


CCF will review 


available information and may advise the commander to suspend. 


If the commander decides on 
be removed from individuals 
reported to CCF. Once this 
until a final determination 


formal suspension of access, 
and attached to DA 5248-R and 


personnel fil 


is done, 
is made by Commander, 


DA Form 873 will 


the commander may not restore access 


CCF. 


receives derogatory information and denial or revocation of a security 


Forward a Letter of Intent 
the individual. The LOI wil 


(LOT) 
1 outline 


to SCI is deemed appropriate, 


through 


explain the proposed actions 
chance to 
incidents. 


The LOI 
LOI addresses SCI access, 


. The LOI 
reply in writing the chance 


only, 


will direct suspension of access to classified material. 
access may continue. 


collateral 


CCF will: 


the command security manager to 
the derogatory information and 
will offer the individual the 
to explain, 


refute or mitigate the 


If the 


will 
letter. 
The 


The individual 
enclosed form 
a rebuttal. 


n 


The commander 
CCF's contemp] 
The individual 
documentat 
superviso 


provided 


will 
lated actions and will o 
ls response must address 
tion may be forwarded as well 
rs. The response will be 
the LOI. 


t will 


All replies to Letters of Inten 
1 ld include commander' 


Endorsements shoul 


acknowledge receipt of 
The person will 
form letter will be submit 


ensure that the person is counseled as 


Forwarded 


the 
indicate 
ted 


LOI by signing and dating the 
his/her intention of submission of 
to CCF immediately. 


riousness of 

forming a reply. 
Any written 

s from 

resentative who 


to the se 
fer advice and assistance in 
each issue raised in CCF LOI. 
as letters of recommendation 
to CCF through the rep 


be endorsed by at least one commander. 
s recommendation(s) to deny, revoke or 


restore the individual's security cl 
rationale addressing the issues out] 
recommendation will returned for c 


th 


aranc 
lined in the LOT. 
omment. 


The commander should provide a 
Responses without commander's 


a final determination is 


When the Com 
made. The f 


mander, CCF, receives 
inal determination is 
individual. IAW AR 600-7-, 
Suitability Evaluation Board (DASEB), 
Personnel Centers on all E6 and above, 
of the LOI, individual rebuttal 
determine which information wil 


1 remai 


furnished through the securit 
CCF provides unfavorable information to the DA 


and CCF final letter will be p 


response to the LOI, 


ty officer to the 


USAR Personnel 
commissioned 


rd 
A copy 


aru 


EB will 


Center, or National Gua 
and warrant officers. 
rovided. DAS 
n in the military personnel fil 


When an individual is 
of a criminal offense, 
his commander will 


incarcerated by 
or when a perso 
take the following 


* 


Wil 
Jacket (MPRJ) 
authority of Commander, 
Commander, CCF, 
martial (date). 


CCE, 
incarcerated 


W 


Fo 
to 


the Commander, CCF, (PCCF- 


hdraw the DA Form 873 from the individual's Military 
GR GPF and stamp or print across th 


rward the DA Form 873 - and DA Form 5248-R exp] 


military or civil authorities on a conviction 
n is dropped from the rolls as a deserter, 
actions immediately. 


Personnel Records 
face, "Revoked by 
Deserted-(Date)," or “Revoked by authority of 
as a result of civil conviction or court 


the circumstances 
D 20755-5250. 


laining 
Fort George G. Meade, 


M), M 


* If no DA 873 is in the MPRJ or OPF, DA 5248 explaining the circumstances 
will be forwarded to Commander, CCF (PCCF-M). 

* If the person has transferred, endorse the LOI, to the gaining command and 
forward an info copy to CCF (PCCF-M). If released from active duty, with 
a Reserve Obligation forward the LOI to the U.S. Army Reserve Personnel 
Center, ATTN: DARP-SPI, St. Louis, MO 63121-5200. Forward a copy to CCF 
(PCCF-M) . 

* If released from active duty without a reserve obligation, endorse the LOI 
to CCF (PCCF-M) with copy of discharge orders. 

CONDUCT OF A CII. CI Agents conducting CII investigations must have a thorough 


understanding of the object 
subversive organizations: 
in counterespionage 


tives and op 
CI investiga 


erations of fo 
tive training; 


reign espionage, sabotage, and 
and training and/or experience 


IT0735 


operations. This is necessary because it is critically important during the 
conduct of a CII that all information is fully developed and properly presented, 
regardless of whether or not the information is favorable to the subject. Also, 
all data obtained must be factually presented to eliminate any need for presumptive 
evaluation during the adjudication of the case. 


The most important fundamental that should be remembered concerning the conduct of a 
personal subject CII is that the CI Agent must attempt to prove or disprove the 
allegation against the subject. 


The CI Agent must remember to use caution during the investigation, especially when 
interviewing the immediate supervisor of a subject, so as not to compromise the 
investigation or cast a stigma on the subject. 


When interviewing a source, the CI Agent will attempt to obtain a sworn statement 
in the sources own handwriting, if derogatory information reflecting on the 
subject's loyalty arises, or if information is obtained which refutes previously 


obtained information concerning the subject's loyalty. If illegible, prepare a 
typewritten sworn statement for the source to review and sign. Include the 
original handwritten statement as an attachment to the IMFR. Never destroy the 


original statement. 


For Record. When conducting a CII, the CI Agent's objective of the investigation 
is to determine the nature and extent of damage to national security. 1 


The intent 
is to develop information sufficient enough to permit its use in a civil or 


military court or to initiate Counterespionage (CE) procedures. However, the 
investigation should not be limited to collecting only evidence which is admissible 
in court. The investigation reports should include all relevant and material 


information. The CI Agent must remember that hearsay and opinions expressed by 
sources during an interview may serve a further use as leads in continuing the 
investigation. The CI Agent must also remember to limit his investigation to the 
allegation. 


Often during the course of an investigation, information relevant to other areas of 
possible CI interest develop. This information will generally concern the 
suitability of the individual as regards his morals, character, and integrity. 

This information will be reported by the CI Agent but not pursued unless 
specifically tasked. 


In accordance with the provisions of AR 381-20, it is the policy of the DA to 
afford the subject of a CII every reasonable opportunity to explain, refute, or 
mitigate any adverse information directly involving him. This is accomplished 
through a subject interview. A subject interview is advantageous to both the 
subject, by affording him the opportunity to tell his side of the story, and to the 
government. A CI Agent must get permission from his control officer prior to 
interviewing a subject of a CII. 


IT0735 1-10 


LESSON 1 


PRACTICE EXERCISE 


n 


The following items will test your grasp of the material covered in this lesson. 
There is only one correct answer for each item. When you have completed the 
xercise, check your answers with the answer key that follows. If you answer any 
item incorrectly, study again that part of the lesson which contains the portion 


involved. 


dvs There are four signers of the Delimitations Agreement. They are the DCSINT, 
DA; the Office of Naval Criminal Investigative Service (NCIS), US Navy; the 
Office of Special Investigations (OSI), Inspector General, US Air Force; and 
which of the following? 


A. Central Intelligence Agency. 


B. Defense Intelligence Agency. 


Cy Defense Investigative Service. 
D. Federal Bureau of Investigation. 
2s The authority to grant, deny, or revoke personnel security clearances to 


classified defense information has been delegated to the Commander, CCF, by 
which of the following? 


A. Secretary of the Army. 

B. Commander, USAINSCOM. 

om Commander, DIS. 

D. DCSINT, DA. 

oe Adverse information in which of the following areas would be justification 


for changing a SSBI to a CII? 


A. Morale. 


B. Loyalty. 


ion Integrity. 


D. Discretion. 
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4. Special Agents conducting a CII will limit the investigation strictly to the 
production of evidence which is admissible in court. 


A. True. 
Bi False. 
De From whom is prior approval requested from concerning the use of covert 


investigative techniques if legal doubt exists? 


A. Commander, USAINSCOM. 


B. FBI. 


on Secretary of the Army. 


DS DCSINT, DA. 
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PRACTICE EXERCISE 


LESSON 1 


Answer Key and Feedback 


Correct Answer and Feedback 


D. 


Loyalty. 
False. 


DCSINT, 


Federal Bureau of Investigation. (page 1-2). 
Secretary of the Army. (page 1-6). 
(page 1-4). 
(page 1-10). 
DA. (page 1-2). 
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LESSON 2 


CONDUCT CI INVESTIGATIONS OF SABOTAGE, ESPIONAGE, TREASON, 
SEDITION, AND SUBVERSION 


I 


CRITICAL TASKS: 301-340-1001 
301-340-2009 


OVERVIEW 


LESSON DESCRIPTION: 


In this lesson, you will learn how to plan, prepare for, and conduct sedition, 
subversion, sabotage, espionage, and treason investigations; the legal constraints 
involved with this type of CI investigation; and how to properly record results of 
the investigations. 


TERMINAL LEARNING OBJECTIVE: 


ACTIONS: Plan, prepare for, conduct, and record the results of sedition, 
subversion, sabotage, espionage, and treason investigations. 


CONDITIONS: You will be given narrative information and illustrations from FM 
34-60 and FM 34-60A. 


STANDARDS: You will plan, prepare for, conduct, and prepare properly formatted 
reports for the conduct of designated CI investigations IAW the 
provisions of STP 34-97B4-SM-TG. 


REFERENCES: The material contained in this lesson was derived from the following 
publications: 


AR 380-5 

AR 381-10 

AR 381-12 

AR 381-20 

FM 34-60 

FM 34-60A 
STP34-97B4-SM-TG 
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This lesson has five parts: 


Part A: Sabotage. 


Part B: Espionage. 
Patt. "C3 Treason. 


Part D: Sedition. 


Fl 


Part Subversion. 


PART A: SABOTAG 


Gl 


ELEMENTS OF SABOTAGE. The elements of sabotage are set forth in title 18, US Code, 
Sections 2151-2156. It is summarized in FM 34-60 as 


"An act of which is to damage the national defense structure; 


Sabotage is also a form of "subversive warfare" which can be used to impair the 
will of the populace to resist. Sabotage is an effective weapon designed to damage 
or destroy a nation's capacity to defend itself. It is indispensable to warfare, 
and used by all nations. It is not a recent innovation of modern warfare. During 
Biblical times, armies destroyed th nemy's fields, crops, cities, and towns. 


At the turn of the 18th century in France, peasants were angered by the fact that 
machines were replacing workers. A French workman angrily threw a shoe into the 
machinery when he was working. Consequently, the term "Sabotage" is accredited to 
the French word "sabot", a wooden shoe. Regardless of the origin of the word, the 
fact exists that sabotage has been used in one form or another through the 
centuries. It was used extensively and effectively during the last two World Wars 
and in other outbreaks of hostilities and armed conflict. 


We expect acts of sabotage, both in overseas area of operations (AO)/and in CONUS, to 

increase significantly in wartime. Sabotage is an effective weapon of guerrilla 
and partisan groups operating against logistical and communication installations in 
occupied hostile areas, and during insurgencies. 


Sabotage may be conducted by trained saboteurs sponsored by hostile guerrilla, 
insurgent, or intelligence organizations or by individuals operating independently 
who are motivated by revenge, hate, spite, or greed. In internal defense or 
limited war situation where guerrilla forces are active, we must be careful to 
distinguish between acts involving clandestin nemy agents and armed enemy units 
or dissatisfied friendly personnel. The threat posed to DOD by this hidden army of 
potential saboteurs is a challenge to CI personnel. Ferreting out individuals in 
the Army establishment who are members of this hidden force is a continuous, direct 
effort of CI. For that reason, the CI investigator must be acquainted with the 
saboteur's potential targets; methods; and capabilities. Equipped with this 
knowledge, he is better prepared to detect, prevent, and neutralize sabotage 
conducted against or within the Army establishment. 
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Sabotage or suspected sabotage are normally categorized by the means employed. The 
traditional types of sabotage are incendiary, explosive 


communism, sabotage can take on a new form with nuclear, 


and mechanical. Decline of 
biological chemical, 


magnetic or electromagnetic means. With the rise and dependency of computers 
sabotage can take on a new means. 


Types of Saboteurs. 


saboteurs and enemy agents. Both are dangerous because 
serious effect upon wars or the national defense. 


* 


Saboteurs are classified into two main categories: independent 


their actions can have a 


Independent Saboteurs. While not in the employ of any foreign power, but 


for reasons of their own, they commit acts of sabotage that aid the enemy. 
An example would be the individual who sets fire to an installation or 
activity as an act of defiance against an unwanted reassignment. As 
stated earlier, this type is normally motivated by revenge, hate, spite, 
or greed. Actions committed by the independent saboteur would probably 
not be considered sabotage in the CI sense; however, each case must be 


considered on its own merits. 


Enemy Agents. More dangerous, the enemy agent 
directed from a sabotage organization which is 
operations. The agents are carefully selected 
types of missions. The sabotage effort can be 
security of the target nation when coordinated 
measures used by the enemy. 


is recruited, trained, and 
expert in covert 

and trained to perform all 
a constant threat to the 
with other weapons and 


Sabotage Targets. Sabotage targets are virtually limitless. Many likely sabotage 
targets are readily accessible to the average citizen during the course of his 
daily activities. However, CI investigative responsibility is limited to 


countersabotage measures within the Army establishment and areas over which it has 
jurisdiction. 


Types of Targets. Sabotage targets will be at any echelon. 


Exampl 


* 


targets are those that must be reduced for tactical reasons, or could make 


the continuances of war difficult if not impossible. 


Bridges. 

Tunnels. 

Supply storage areas. 
Railway systems. 


Communication facilities. 


National level economics, political, geographical, and military resources. 


Industries. 
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Target Analysis. The factors considered by the saboteur in his target analysis are: 
* Criticality: Items needed for national defense. 


my Vulnerability: The degree of susceptibility of a target to damage. 


* Accessibility: The degr of ease or difficulty in infiltrating the 
target area. 


* Recuperability: Restoration of a target to a point where the original 
purpose is served. 


The last factor, recuperability, is most important to the saboteur. The target 
must be reduced to a state of incapability for a reasonable period of time to be 
worth the risks involved. 


SABOTAGE METHODS. There are many different methods to commit sabotage, some of 
which are neither physical nor violent. Passive Sabotage is a nonviolent means or 
indirect action directed at morale. It involves passive resistance on the part of 
the populace. It is not organized to the extent that individuals or groups are 
given specific tasks. 


Active Sabotage is the method of sabotage of primary interest to the CI 
investigator. It has the physical forms of sabotage as expressed in Title 18, US 
Code. They are classified as: 


x Incendiary. 
* Explosive. 
* echanical. 


The saboteur decides which form he will use based on type of target; vulnerability; 
security; desired effects; time element; and availability of sabotage materials. 


The question of which form is more effective against specific types of targets is 
relatively easy to decide. However, the ability to properly use the various 
methods depends upon the training of the saboteur. 


Incendiary Sabotage. Is the use of a combustible material to maliciously start a 
fire to destroy property. Normally, this constitutes arson. (Arson becomes an act 
of sabotage when there Is an Intent to hinder defense efforts and reason to believe 
the act may hinder the war effort.) 


Explosive Sabotage. Violently destructive and, when properly used, can neutralize 
or destroy targets which are resistant to fire. The saboteur will use explosives 
on selected targets when speed of destruction is desired, or when he wants to 
instill fear among the populace or employees of an installation. 


Mechanical Sabotage. Th asiest to perpetrate and is usually directed against 
industries, railroads, and ships. No special tools are required; the main 
requirement is the saboteur must have access. The five basic classifications of 
mechanical sabotage are-- 
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Breakage. 

Use of abrasives. 
Acts of omission. 
Substantiation. 
Contamination. 


These acts cove 
in combination. 


SA 


BOTAGE BY NUCLEAR, BIOLOGICAL 


r a wide field and may be committed by the saboteur either singly or 


im 
U:25% 
biological and chemical agents, 
these areas. 
of these agents. 


Suffice to say, 


mense destruction capability of nuclear weapons and also of the fact tha 
has no monopoly over the manufacture of these weapons. 


AND CHEMICAL (NBC) MEANS. We are aware of the 
t the 
With respect to 
we know other nations have exhibited an interest in 


The former Soviet Union has experimented with and standardized some 
small nuclear weapons and controll] 
and chemical agents have definite sabotage potential. 


ed biological 


Biological Agents. Biological warfare (BW) is the military use of living organisms 
or their toxic products to cause death, liability, or damage to man, domestic 
animals, or crops. BW has never been used on a large scale with modem weapons. 


However, 


Chemical Agents. Chemical warfare (CW) 
highly lethal to mildly incapacitating. 
producing various effects, 


* 


Agents which produc 


d 


throughout history there are documented cases wherein diseases wer 
in attempts to reduce an enemy's ability to fight. 


us 


agents can produce effects ranging from 


There a 
available to the saboteur. 


p fo 


a deep sl 


Whatever chemical 
aerosols, capsules, vials, 
carried by wind and dust. 


Nuclear Devices. An important 


Lethal poisons which enter the body 


or agents the saboteur uses, 
special dispersal containers, 


factor when discussing 
devices for sabotage is the destructive capability of an atomic explosion. 
atomic demolition devices destroy indiscriminately. 


re many chemical compounds, 
Such compounds could include: 


r several hours. 


through a small break in the skin. 


Chemicals to contaminate drinking water. 


all can be disseminated by means of 
or spread in areas to be 


the potential use of nuclear 
Some 


Others, like biological and 


chemical warfare agents, dest 
equipment all remain unharmed. 


We must 


biological, and chemical-will be used 


ARSON. A 
directly 
delayed ignition. 


For 


roy only personnel. 
not rul 
the enemy launch a major attack against the U.S., 
to th 


Buildings, machinery, and 
out the possibility that, should 

all three sabotage means-nuclear, 
fullest extent. 


=} 


rson is one of the saboteur's most effective weapons. 
to combustible material or he may employ mechanical timing devices fo 


He may apply flames 
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any case in 
and/or crim 


which sabotage is a possibility, the following are accomplished by MP 
inal investigators: 


* Protect the scene from mutilation by removing all unauthorized people from 


the area, roping off the area if necessary, and posting guards to deny 
entrance and prevent removal of any items. 


% Locate witnesses, record their names and addresses, and, if feasible, hold 


accompanied 


to maintain 


oxygen, or lowering of the temperature will extinguish the burning. 


them for questioning. Witnesses held should be segregated. Notify MI. 


Burning Factors. Combustion or burning is the rapid oxidation of substances 


by generation of heat and light. Burning occurs only when three 


essential ingredients are present-fuel, oxygen, and a temperature sufficiently high 


the process of combustion. Withdrawal of the fuel, elimination of 


Although fuels may be gaseous, liquid, or solid, combustion usually occurs when 


they are in 


a finely divided vaporous state. With many materials, oxidation takes 


place slowly at room temperature. However, for oxidation to reach the point of 


combustion, 
off oxygen, 
temperatur 


the materials must be heated. When heated, an oxidizing agent gives 
which in turn has an intense attraction for any fuel. If the ignition 
is reached, a violent reaction occurs. 


Most ordina 
addition of 
air, the ca 
combines wit 
as ash. 


Several fact 
directly af 
soon become 


ry combustibles are compounds of carbon and hydrogen with the frequent 
mineral matter and oxygen. When they burn completely and freely in 
rbon reacts with the oxygen to form carbon dioxide, the hydrogen 

th the oxygen to form water vapor, and the mineral matter remains behind 


tors contribute to the spreading of a fire. Drafts and air supply 
fect behavior of fire. A fire started in a completely closed space will 
extinguished due to use of the available oxygen and generation of 


noncombustible gases which smother the fire. 


Conversely, 
action exist 
material. 

shafts or st 


the combustion rate is greatly increased if the slightest chimney 

ts where the hot gases and flame from the fire contact combustible 
Disastrous fires have resulted in large buildings where the elevator 
talrways served as a chimney to direct the uprushing flames and gases. 


Other facto 


rs that may influence the spread of fire include: 


* Dryness of surrounding vegetation or the structure itself. 

* Presence of rain or amount of humidity. 

im Temperature of the surrounding air. 

* Building construction, to include wooden partitions, unprotected doors and 
window, elevator shafts and stairways, overhanging eaves, and wooden 
shingles. 
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EXPLOSIONS. 
liquid, 
classified as low- or high-order, 


An explosion is 
or gas) 


the rapid and violent 
with resultant pressure and heat. 
according to 


expansion caused by the combustion. 


de 


de 


In 


interior 
pattern. 


and 


result 


High-order explosions (concentrated). 


racterized by an extremely rapid combustion, 
occurring through the action of explosives such as dynamite, 
ta erythritol tetra nitrate 


cha 


pen 


a sl 
flagration. 


a building, 


Low-order explosions (diffused). 


walls are fo 


a clearly marked area o 
from gas, liquid fuel, 


rced out 
Objects are scattered in erratic directions w 
Other normal characterist 


solvents, 


(PI 


tward, 


ETN), 


the speed 


twisting and 


causing 


combustion of a material 
Explosions are generally 


(solid, 


in feet per second of the 


An explosion in this category is characterized by 
low expansion over a relatively wide area into a combustion known as 

Most explosives causing this 
than a shattering effect which results ina 
formation. 


type of explosion have a pushing rather 


tearing type of 


the roof to fall into the 


ith no semblance of 


tics are absence of local shattering, 
special damage or discoloration. 
and chemicals. 


dust, 


craters, 
Such explosions 


known as 


and various “plast 


No atmospheric oxygen is required since the explosive ca 


in 


produces a large volume of gas, 


Its origin can be considered a poin 
center, 
small, 
a radia 


all 


of material 
debris will 
Suction ef 
identification 


X-ray films of 


the form of compounds of high oxygen content. 


An explosion in this category is 


detonation reaction, 
TNT, nitroglycerine, 
tic” explosives. 


rries its own oxygen supply 


An explosion of this nature 


heated and expanded by the heat of the reaction. 


t wher 


th 


directions. Near th 
with evidence of 
be blown out in 
Fect or deflection of 
of the patte 


cadavers, bu 


are helpful in 
The difference between the two 
investigator because the first 


Explosive Accessories. 


more likely to be deliberate or 


Safety 


in waterproof casing. 


cha 


Detonating cord. 


prot 
are 


rge. 


tective casing 


fo 


rned by the explosion, 


types of explosions 
type is ordinarily accidental 
planned. 


fuse. 


The fuse is the 


ther 


may reveal 
the identification of the explosive device used. 


forces produced radiate equally in 
will usually be shattering o 
high- velocity fragments. 
ting pattern from the 
rces by objects may after 
rn should still be possible. 


fragmenting 
Movable objects and 
center of the explosion. 
this pattern, but 


foreign objects which 


Ficant to the 


is signi 


while the second is 


Usually consists of a train o 
medium for carrying a flame 


used to detonate main charge explosives. 


Blasting caps and detonators. 


initiating and a detonating charge. 
caps and detonators are ignited in one of two ways: 


f black powder 
to the explosive 


An example would be PETN explosives which are wrapped ina 
that makes them insensitive to shock. 


Detonating cord and fuses 


Are copper or aluminum cases filled with an 
They may be nonelectric or electric. 


Blasting 
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* Ignition by safety fuse. Crimpers must be used to clamp the detonator to 
the fuse. Tool marks left by the crimpers on detonator case fragments 
found at the scene of the explosion may aid in making positive 
identification of suspect tools. 


* Electrical ignition. Detonators are wired to an electrical source. 
Closing the circuit will result in instantaneous or timed (interval) 
explosions. Connecting wires usually remain intact after explosion which 
may provide valuable trac videnc 


Boosters. An explosive charge is sometimes used to amplify or boost the shock 
provided by detonators or blasting caps in order to detonate main charge explosives. 


Timing devices. Electrical, mechanical, or chemical devices may be used to trigger 
an explosive charge at a predetermined tim 


Handling Explosives. Ordnance detachments (explosive disposal) are strategically 
located through out CONUS and overseas commands. Members of these detachments are 
qualified explosive disposal technicians. 


In cases where the use of explosives is suspected, the explosive ordnance disposal 
(EOD) control detachment nearest the scene should be notified immediately for 
support. 


The EOD technicians can provide invaluable assistance not only in disarming 
explosive devices, but also in the identification of residue of devices that have 
exploded. These remnants may give excellent clues concerning the type of explosive 
used, how it was detonated, and how and where it was manufactured (commercially or 
homemade), and the approximate amount of explosive used. 


Undetonated explosive residues (in the area, in safelocks, keyholes, and so on), 
spilled explosives, and explosive charges left behind by the perpetrator must not 
be touched. Even a small amount of explosive residue can be detonated and cause a 
serious explosion. 


The explosives technician provided by the EOD detachment will decide whether th 
bomb will be disarmed or destroyed. If th xpert decides to destroy the device, 
the investigator may be able, beforehand, to photograph its outer surfaces, or, if 
it is packaged, photograph the writing or postage data on the wrappings. If the 
device is destroyed, the investigator should carefully collect all remaining 
evidence. 


Do not photograph bombs or explosive charges with a flashbulb since the heat may 
cause detonation. 


The search for remaining explosives at the scene must be supervised by an EOD 
technician. In case of suspected sabotage, local MI personnel are notified. If 
the incident takes place within CONUS, the FBI must be contacted. 


CONDUCT OF SABOTAGE INVESTIGATIONS. U.S. Army Criminal Investigation Division 
Command (CIDC) will assume investigative lead for actual or suspected sabotage. CI 
elements will monitor the CIDC investigation and attempt to ascertain the existence 
of hostile, enemy, or foreign Government involvement or intent of the sabotage. CI 
elements will not conduct their 
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own investigation until 


CI elements will not conduct thei 
involvement is evident o 
then a Joint 


determined, 


normally 


As a CI Agent, 


retaining invest 


r suspected. 
(CI/CIDC) 


tigation lead 


not 


you ar 


fires and explosives or 


equipment. 


You are, 


xpect 


however, 


foreign Government involvement or intent of the sabotage. 
r own investigation until foreign Government 


If foreign Government involvement is 


investigation may be conducted, 


d to be a 
to be fully knowledgeable of machinery and complicated 
ncouraged to obtain the assistance of technical 


with CIDC 


technical expert in the chemistry of 


experts during the planning stage of a sabotage investigation. 


Fundamental Investigative Rules. Three fundamental investigative rules should be 
foremost for the CI Agent investigating a sabotage incident. They are as follows: 

* Sabotage investigations require immediate action. 

* The saboteur may still be near the scene, so other military targets may 
require immediate additional security protection to preclude or limit 
further damage. 

* The incident scene must be preserved and analyzed befor vidence is 
altered or destroyed. 

General Investigative Guidelines. When conducting investigations of sabotage, the 
CI Agent must proceed with objective, and logical thoroughness. The standard 
investigative interrogatives apply: 

WHO: Determine a list of probable suspects and establish a list of persons 
who witnessed or know about the act. 

WHAT Determine what military target sabotaged and the degree of damage, to 
the target (momentary and operational). 

WHEN: Establish the exact time when the act of sabotage was initiated and 
when it was discovered; from as many sources as possible. 

WHERE Determine the precise location of the target and its relation to 
surrounding activities. 

WHY: Establish all possible reasons for the sabotage act through the 
investigation of suspects determined to have had a motive, ability, and 
opportunity to accomplish the sabotage act. 

HOW: Establish the type of sabotage (such as, incendiary, explosive, 
mechanical, chemical) and determine the procedures and materials 
employed through investigation, technical examination, 


Special Investigative Actions. 


and analysis. 


The following outline of possible investigative 


actions may be used as a guide for investigating most incidents in which sabotage 


is suspected: 
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Obtain information and analyze the details surrounding the initial 
incident Establish the identity of the person 
incident 
reported discovery of the sabotag 


reach th 
disturbed. 


* 
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to the CIDC unit. 
and his reason for doing 


scene befor 


Assist the MP protect th 


SO. 


possible sources hav 


and examin 


Examine the incident scene as quickly as possible. 


reporting of the 
reporting the 


Determine the facts connected with the 


them for possible discrepancies. 


scen 


unauthorized personnel from the area, 


and post 


guards to deny entrance and prevent 


from disrupt 


roping 


tion. 


off 


the area if 


The CI Agent will attempt to 
dispersed and evidence has been 


The MP will remove all 


necessary, 


anything from being removed. 


CI Agents should help MP investigators at the crime scene; they should not 
interfere with the crime scene investigation. 

CI Agents may help CIDC personnel process the crime scene, to include 
locating all possible sources for questioning. CI keep sources separate 


only in the sense that they ar 


identified to M 


should not physically separate sources. 


Preserve 


taking pictures. S 
scene processing. 


the incident scene by taking notes, 


making detailed sketches, 
appendix A for a more detailed explanation of crime 


BP Or CLDEY 


CI Agents 


and 


Arrange for technical experts to search the scene of the sabotage act; 


collect and preserve physical evidence; 
explosives expert 


Arson specialists, 
required. 


Take steps necessary to prevent furt 


classified information o 


r material. 


ts or other 


ther damage 


and obtain all 


possible clues. 


tO 


types of technicians may be 


the target and safeguard 


Interview sources and obtain sworn statements as soon as possible to 


reduce the possibility o 


Determine th 


necessary 


such 


identify to CIDC. 


ity; CI has 


file of part 


de Friendly unit MO file. 


files to be checked. 
examination of the incident scene and by source interviews. 
action only in coordination with CIDC. 
expertise and responsibil 
Source 


f forgetting details or comparing stories. 


These will be based on 


CIDC 


the modus ope 


CI conducts 
crime scen 
(MO) expertise to 


has th 
randi 


ticular importance may include: 


or insurgent activity file. 


es on arsonist. 


Diss Partisan, guerilla, 
3h .ocal police fil 
4. socal police MO files. 


Dik Foreign intelligence agency MO files. 
Ors Terrorist MO files. 
Ts Provost Marshal files. 


File checks should include background information on sources and the 
person who discovered and reported the act of sabotage. 


Interrogate suspects. Study all available information such as eviden 
technical and laboratory reports, statements of sources, and informat 
from informants in preparation for interrogation of suspects. 


PART B: ESPIONAGE 


ce, 
ion 


ill be 


ELEMENTS OF ESPIONAGE. Unlike sabotage cases, most espionage investigations w 
personal subject rather than incident-type cases; that is, they will originate 
with allegations regarding the activities of known individuals. There are 


instances, however, when CI personnel will be directed to conduct investigatio 
incidents in which espionage is suspected, but the identity of suspect(s) has 


been established. 


Leads in 


espionage investigations may originate from a wide variety of sources 


prominent among which are the following: 


* 


There ar 


Reports from sensitive sources. 


ns of 
not 


, 


Reports from other intelligence, security, and law enforcement agenci 


Evidence of espionage discovered during inspection and surveys, of 
classified document handling and storage procedure. 


Reports submitted by military and civilian personnel IAW AR 381-12. 


Evidence of espionage discussed during screening of refugees, line 
crossers, displaced persons, civilian interns, enemy prisoners of war 
(EPW), detectors, and similar groups in areas of armed conflict 


Information developed during the course of routine PSI. 


fiv lements of espionage: 
Contact or communications. 


Collection. 


Tradecraft. 


Reward or Motive. 


Ss. 
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* Travel. 


All of these elements are identifiable during the course of a counter espionage 
(CE) investigation. Examples of the elements of espionage are that: 


(1) The accused communicated, delivered, or transmitted any document, writing, 
code book, signal book, sketch, photographic negative, blueprint, plan, map, model, 
note instrument, appliance, or information relating to national defense. 


(2) This matter was communicated, delivered, or transmitted to any foreign 
Government, or to any portion or party or military or Naval Force within a foreign 
country, whether recognized or unrecognized by the US, or to any representative, 
officer, agent, employee, subject, or citizen thereof, either directly or 
indirectly. 


(3) The accused did so with the intent or reason to believe that such matter 
would be used to the injury of the US or to the advantage of a foreign nation. 


Federal Espionage Statutes. The espionage statutes encompass many kinds of 
activities. They have as their ultimate goal to prevent defense information 
from falling into the hands of a foreign nation. The outstanding aspects of 
the Title 18, US Code, Sections 793-796, are summarized in FM 34-60 as follows: 


"The Act, either directly or indirectly, of obtaining, delivering, 
transmitting, communicating, or receiving information in respect to 
national defense with the intent or reason to believe that the 
information may be used to the injury of the U.S. or to the advantage 
of any foreign nation. The offense of espionage applies in time of 
peace or war." 


Investigative Guidelines in Espionage Cases. Analysis of the statute and pertinent 
court decisions permit the following conclusions to be drawn about proof of 


espionage: 


x "National defense information: is information of military significance 
which has not been published for public consumption; that is, not 
distributed in public channels. It need not be classified defense 
information as defined in AR 380-5. The critical points are if it relates 
to the national defense and has been restricted to authorized channels. 


* “Any foreign nation” means the nation involved need not be a declared 
enemy. 
i Loss through gross negligence requires no positive act because it is a 


crime of omission. 


* Each facet, “loss through gross negligence" and "failure to promptly 
report," is a separate and distinct crime. 


The espionage investigation must be directed toward the collection of information 
and evidence to show national defense information was involved, and there was an 
intent or reason to believe the US would be injured or a foreign nation would 
benefit. 
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Spyin Article 106, Uniform Code of Military Justice (UCMJ). Spying is strictly 
limited to a wartime military situation. This is governed by international law, 
particularly the provisions of the Geneva Conventions. Although the crime of 
spying as defined in Article 106, UCMJ, differs from espionage, CII based on 
Article 106 are categorized as espionage cases for reporting and statistical 


purposes. There are fiv lements that must be present to constitute the crime of 
spying: 
% It only occurs during time of war. 
* It is committed in a U.S. military AO. 
* The accused must be caught while seeking information to communicate to the 
enemy. 
* The accused must have the intent of communicating the information to the 
enemy. 
* The accused must have been acting in a clandestine manner. 
Conduct of Espionage Investigations. No single set of investigative procedures Is 
applicable to the conduct of espionage investigations. Espionage is made up of 
many different elements; espionage investigations are not always aimed at the 
arrest and prosecution of the offender. Prosecution of espionage case may be 
deferred to the Department of justice, CONUS or to the host country OCONUS. CI 
Agents responsible for such an investigation must have a thorough and up-to-date 


knowledge of all espionage and counterespionage methods and procedures as discussed 
in FM 34-5(S). 


In any espionage case, use any or all types of investigative techniques and tools 
described in FM 34-60 AND 34-5(S). 


* Determine what specific techniques to use on a case-by-case basis. 

* Get proper authorization to utilize investigative techniques. 

* Conduct the investigation IAW current laws and regulations. 
Records examinations may break the cover story of an espionage suspect. CI Agents 
may use properly authorized physical or technical surveillance to obtain leads or 
vidence. They may use confidential or sensitive source or undercover operations 
to locate and identify suspects. Investigative photography may provide evidence of 


an attempt to transmit national defense information to a foreign nation. 


The following quotation from testimony in February 1950 by the late J. Edgar 
Hoover, who was then FBI director, explains why arrest and prosecution are not 
always the objectives of espionage investigations: 


“In a criminal case, the identification and arrest of the wrongdoer are 
the ultimate objectives. In an espionage case, the identification of the 
wrongdoer is only the first step. Vhat is more important is to ascertain 
his contacts, his objectives, his 
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During the conduct of sedition complaint-type investigations, several principles 
These include the facts that covert investigative techniques are usually 
licable, but that standard interview and interrogation techniques should 
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On the surface, Section 2387(a), Title 18, USC is very clear, but upon analyzing 
the law, there is no clear standard for judging exactly what subversion is. One 
important question remains constant concerning the obscure treatment of the term 
subversion: "At what point does an individual exercising his right to free speech 
influence the loyalty, morale, or discipline of a member of the armed forces? 

As Assistant Chief of Staff for Intelligence, Department of the Army (ACSI, DA), 
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LESSON 2 


PRACTICE EXERCISE 


n 


The following items will test your grasp of the material covered in this lesson. 
There is only one correct answer for each item. When you have completed the 
xercise, check your answers with the answer key that follows. If you answer any 
item incorrectly, study again that part of the lesson which contains the portion 


involved. 


‘Ty, Which is an example of a sabotage target? 


A. Bridge. 


B. Tunnel. 
Ce Supply dump. 
D:. All of the above. 


2s Are CI Agents tasked with investigating incidents of possible sabotage 
expected to be technical experts in the chemistry of fires and explosives? 


A. Yes. 
B. No. 
3% The objective of all espionage investigations is to obtain sufficient 


evidence to arrest and prosecute the offender. 


A. True. 
B. False. 
4. Loss through gross negligence and "failure to promptly reports is considered 


a crime of what? 


A. Omission. 

B. Remission. 
Cy Commission. 
D. Submission. 
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oe When would an investigation, in which treason is alleged to have occurred, 
most likely be conducted? 


A. Immediately prior to hostilities. 


B. During hostilities. 


‘on Immediately after hostilities. 


D. As soon as the crime of treason is alleged. 
6. CII involving sedition will occur only during wartime. 
A. True. 
B. False. 
Tis Vhich article of the UCMJ covers mutiny? 
A. 5 
B. 28. 
C. 94. 
D. 137% 
owe The definition of subversion included in Section 2387 of the United States 


Code is clear and specific; therefore, CI Agents would have no problems 
obtaining sufficient evidence to obtain a conviction of any person charged 
with the offense of criminal subversion. 


AS True. 


B. False. 
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PRACTIC 


= 


EXERCISE 


Answer Key and Feedback 


Item Correct Answer and Feedback 

ie Des All of the above. (page 2-3). 

2 B. No. (page 2-8). 

3s B. False. (page 2-13). 

4. A. Omission. (page 2-12). 

Dis GC. Immediately after hostilities. (page 2-16). 
6. B. False. (page 2-16). 

Tse CG. 94. (page 2-17). 

8. B. False. (page 2-18/2-19). 
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LESSON 3 


PHYSICAL EVIDENCE 


CRITICAL TASKS: 301-340-1002 
301-340-1100 


OVERVIEW 


LESSON DESCRIPTION: 


In this lesson, you will learn how to identify physical evidence of CI interest; to 
preserve a crime scene through photography and/or sketches; and to fulfill all 
requirements for the handling of physical evidence to include admission before a 
judicial proceeding. 


TERMINAL LEARNING OBJECTIVE: 


ACTIONS: Identify physical evidence of CI interest; prepare sketches; take 
photographs; prepar vidence tags; account for, store, release, and 
dispose of evidence; and process a crime scene. 

CONDITIONS: You will be given narrative information and illustrations from 


FM 34-60 and FM 19-20. 


STANDARDS: You will process physical evidence of CI interest IAW the 
provisions of STP 34-97B14-SM-TG. 
REFERENCES: The material contained in this lesson was derived from the following 
publications: 
AR 55-355 
AR 190-22 
AR 195-2 
AR 195-5. 
AR 380-5 
AR 710-2 
FM 19-20 
FM 34-60 


STP 34-97Bl1 
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This les 


son has two parts: 


and Dispose of Evidence. 


Part A: Physical Evidence of CI Significance. 
Part B. Account for, Store, Release, 
PART A: PHYSICAL EVIDENC 


Physical evidence is tangible in nature and recognizable in form. 
It includes all 


prove or 


KE OF CI SIGNIFICANCE. 


Gl 


disprove a fact in dispute. 


It 


tends to 
articles and materials 


collected in connection with an investigation to establish the identity of the 
perpetrator and the circumstances under which an incident occurred. The articles 
and materials are used to aid in the prosecution of the offender or to terminate 
the case. 

The importance of physical evidence, which may be encountered in any type of CI 
operation, is not limited to those investigations likely to result in a trial. 
Physical evidence of probative value is often essential to the proper determination 
of administrative actions such as the granting of a security clearance, the 
issuance of a visa for entry into the U.S., or the admission of an alien into the 
armed forces. 


not 


Th 


CI Agents ar 
various substances 


xpected to be experts 
normally will requir 


on physical 
th 


such as ballistics experts, chemists, 
the substance and its relationship to 
should have a general knowledge of 
physical evidence and be able 
encountered during 


Documentary Evidence. 
encountered by CI. Manuscripts, 


and fingerprint 
the crime. 
the value, 
to recognize, 
the course of an investigation. 


statements, photographs, movi 


identity papers, 


video tap 


Questioned Documents. 
Chapter 21, FM 19-20, Law Enforcement 
of questioned documents and types of 
investigation experts and laboratories. 
liaison with 


Documents Containing Codes and Ciphers. 
used in 


the key to the system has been obtained, 


Questioned documents ar 

Investigations, 
assistance available for criminal 
This assistance may be obt 
the appropriate provost marshal's office. 


communication between operational el 


However, 
limitations, 


collect, 


records, 


s, pamphlets, 


those whos 


videnc 


handle, 


files, 
maps, 
and similar documents are likely to be collected in CI operations. 


Codes and ciphers 


describes va 


analysis o 
services of one or more specialists 

t technicians to fully identify 
as a CI Agent, 


you 


and characteristics of 


sketches, 


and preserv 


reports, 


videnc 


Documents are the most common items of physical evidence 
magnetic tapes, 


swo 
passpo 


cn 
rts, 


validity is disputed. 


(cryptog 


raphy) 
lements of espionage agencies. 


rious categories 


tained through 


are often 
Unless 


the investigator should not expend any 


time attempting to decrypt the messag 
a history of the circumstances unde 


the r 
unit sta 


You should also be familiar with the procedu 
assistance of appropriate experts and labora 


lated investigation, 


nding operating procedures 


that some of the information 
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Th 


investigator shoul 


ld provide along with 
r which it was obtained and a brief summary of 


tory facilities. 


the document should be processed in acco 
(SOP). 


rdance with the 


res of your unit for obtaining the 
It should be noted 


presented in this lesson pertains to strictly criminal 
you should be familiar wit 


a CI Agent, 
evidence. 


Documents Suspected of Containing Sec 


concealment from visible 
specially treated papers, 
facets 
suspects, 
of secret writing, 
should b 
facility o 


r agency wher 


of espionage communica 
or otherwise obtained under 
should 
made to recover 


detection of 
microphotog 


be 
any secret 


tion syst 


text. 


However, as 


raphy, 
tems. 


ret Writing. 


conditions 


indicating 


Other Types of Evidence. 
fingerprints; 
and 


Fingerprints. 
individuals, 
fingerprints can be 


Finge 


th xpertis 


tested for indications of secret 
The material should be forwarded 
is available. 


Traces and clues o 
firearms and ammunition; 
from deposits of foreign substances such as fibers, 


conside 


are included in chapter 7 of FM 19-20. 


Indentations and Fractures. Physical 
media are often of value as evidenc 
and tire imprints. 


FM 19-20. 


Tire imprints may identify a particul 
and unique scars. 


of wear, 


direction in which sand, 


distinctiveness of the track; 


track. 


Foo 
weight, 


soil, 


In 


i 


or water was thrown; 


tprints may reveal direction and speed of movement, 
and physical deformities. 


addition, 


apparent and provide additional leads. 


Firearms and bullets have individual characterist 
examination for identification purposes. 
have individual characteristics which may be d 
The weapon wil 
and possibl 
a cartridge casing and bul 


microscope. 
serial number, 


et will 


ll have on it 
y fingerprints or dist 
] have such characte 


Each 


and devel 


mpressions and indent 
Examples would be footprints, 
Collection and preservation methods are included in Chapter 8, 


indentations made by tools, 
soils, 


since they never change throughout a person's lifetime. 
transferred, photographed, 
thus providing invaluable evidence for purposes of identification. 
ration of fingerprint patterns and methods of collect 


lar vehicle by association of the brand, 
Direction of travel can often be determined from the 


investigations. 
th the overall procedures for handling 


Secret writing or the 

written material by means of invisible inks, 
and similar systems are also impo 
Documents taken 


rtant 
from espionage 
the possible presence 
t writing. No attempts 
to a 


ften may be found in the form of latent 


tires, or shoes; 


and stains. 


rprints evidence is the most positive means of identifying 


Surface 


loped by various techniques, 


Detailed 
tion and preservation 


left in various 
tool marks, 


tations 


amount 


sex, 


the brand of 


tics subject 
Firearm and bullet fired 


speed of the vehicle from the 
and the weight of the load from the depth of the 


approximate height and 
footwear may be 


to scientific 
therefrom 
xamination under a 


rt 


cted by 


tinctive feat 


indentations associating them specifically with a particula 


and p 


If examined by an expert, 
the 


pierced the glass can sometimes b 


peculiar characteristics, 
and 


glass fractures may reveal 


id 


reservation methods are discussed in Chapter 9, 


the di 


xp 
t the name of the manufacturer, 


a trademark, 
When discharged, 


CUres. 


ristics as scratches or 


r weapon. Collection 


FM 19-20. 


rection of the blow or 


type of instrument used to break the glass. 


ntified. 


The nature 
Since each 


examination may serve to identify 


thus provide leads in some investigative situations, 


Chapter 10, 


of a projectile which 


type of glass has 


the glass manufacturer 
FM 19-20. 
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Trace Evid 


is evidenc 


examiners 
Fibers. 
identificat 
synthetic. 


Animal 


fibe 


nc 


7 


tion. 


cS include hair, 


from 


another, 
differentiation. 


xample, d 


wool, 


which is examined and attest 
to be admissing in court. 


Hairs and fibers have distinctive characterist 
They may be classified as animal, 


silk, 


Trace items include: 


ted to, 


by laboratory 


tics which may be useful in 
tabl 


mineral, and 


veg 


and fur. Each 


the individual. 


Vegetabl 


fibers 


include cotton, 


linen, 


made of the race, 


Jute, and sisal, 


sex, 


, 


type can be distinguished 
and many types have individual characteristics which permit further 
By study of the diameter and texture of a human hair, 
termination can sometimes b 


for 
and general age of 


each of which has its own 


distinctive characteristics such as color of dye and number of strands per thread. 


Mineral 


fibers 


Synthetics have expanded much beyond the well-known rayon and nylon, 


include glass and asbestos. 


distinguished from one another by laboratory analysis. 


Soil 
mic 
dust, 

reveal 
origin. 
laboratory 
rust, 


the 


Laundry Ma 


and Stains. 
roscopically and chemically. 
the latter being composed chiefly of vegetabl 
source or general origin, 
lting from any caus 
. They may be identified as food, 
or body fluids. 


Stains resul 


geological 


rks. Dry cleaning, 


Study may indicate a 


laundry, 
they be made with indelible or invisible ink, 


dif 
fib 


are susceptibl 


vegetabl 


Samples of soil can provide information of valu 


but can be 


wh xamined 


n 


rs. 


rerenc 


between soil and 
Soil analysis may 


and at times a specific area of 
to analysis ina 


oil, 


ma 


and other clothing 


identification. Police usually maintain records which can help with this type of 
identification. 
Detective Dyes. Police at times use dyes and florescent powders which can be 
dusted or sprayed on items likely to be handled by suspects. Some of these are 
virtually indelible; others are invisible, but susceptible to detection under 
ultraviolet light for prolonged periods after contact. 
Collection and preservation methods are outlined in Chapter 11, FM 19-20. 

PART B: ACCOUNT FOR, STORE, RELEASE, AND DISPOSE OF EVIDENCE. 
HANDLING EVIDENCE. Physical evidence is one of the CI Agent's most valuable assets 


or 


tter, 


linen marks, 
may provide valuable clues 


grease, paint, 


whether 
in 


in pursuing the investigation to a successful conclusion. 


the investiga 
establishing 


maximum benef 
its collec 


in 


it from physical 


vidence, 


th 


tion, 


but he must also know how 


evidence must be preserved for the development of leads, 


examination, 


Such handling and care involves: 
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and/or for presentation in court. 


Tl 
tive action during conduct of the investigation. 
guilt or innocence of an accused person in a court. 
investigator must 
to handle and care 
for laboratory 


produces leads for 
It aids in 

To achieve the 

not only be skilled 

for it. The 


” Storing th 


vidence to retain the inte 


condition as 


7 Maintaining 
nsure its 


nearly as possible. 


a chain of custody for the 


sod Transmitting 
mm Disposing of 
DEFINITIONS. 


Evidence. Anything t 
a fact. (AR 195-5). 


Physical Evi 
is obtained 
technical da 


an Testimonial 


videntiary value. 


the item properly to the 1 


hat helps to ascertain the 
Evidence may be physical o 


grity of the item in its original 


item to assure responsibility and 


aboratory for analysis. 


the item when it is no longer of evidentiary value. 


truth of a matter or gives proof of 
r testimonial. 


dence - evidence like ident 


ified weapons and fingerprints that 


by searching crime scenes, 
ta. 


tracing leads, and developing 


Evidence - like sworn statements of eyewitness accounts and 


admission of guilt is obtained through communication with people. 


This lesson addresses only physical evidence. Physical evidence is divided into 
two general categories: 

* Movable evidence can be picked up at a crime scene or any other location 
and transported. Examples are tools, weapons, clothing, glass, and 
documents. 

* Fixed or Immovable evidence cannot be readily removed from a scene because 
of its size, shape, or makeup. Examples would be walls, telephone poles, 


and floors. 


Fragile evidence is p 
preserve its state, c 
value. It may be mov 
immovable, but a cast 
evidence. Fingerprin 
their natural state o 


hysical evidence which, if 


special care is not taken to 


an deteriorate to a point where it is no longer of evidentiary 


able or immovable. A footp 


rint in the snow is actually 


of it can be taken and preserved so as to be admissible as 
ts can be "lifted" or removed; body fluids can be preserved in 


r close thereto. 


NOTE: The remaining portion of this lesson addr 


handling, packaging, 
collected and until i 


EVALUATING EVIDENCE. 
is not evidence. Th 


and caring 
t is disposed of. 


The question invariably ar 


s of 


for an item of physical evidence after it 


sses the general precept 


cT ct 


has been 


ises as to whether an object is or 


investigator resolves this 


in light of the circumstances and conditions you 


evaluate each piece o 


other evidence. Supp 
enhanced by your past 
processed as evidenc 


to the investigation and it 


question by evaluating the object, 
find at the crime scene. You 


f evidence, individually and collectively, in relation to all 

ort your evaluation with common sense and sound judgement 

experience. If doubt exists, the object is secured and 
Later evaluation can determine the worth of such evidence 


ts ultimate disposition. 
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IDENTIFICATION. The investigator who first receives, recov 


rs, or 


physical evidence must be able to state positively at a later date 
specific article or item was obtained in connection with a specific investigation. 

Identification is accomplished when the investigator marks and tags the evidence as 
it is obtained or collected. The investigator should form the habit of marking and 


tagging evidence promptly. 


discovers 
that the 


Marking. The person initially assuming custody of evidence marks it by inscribing 
his initials and the military date and time directly upon individual item(s) of 
physical evidence. Care must be exercised to place the markings so as not to 
destroy any latent characteristics of the item(s) or to reduce its value as 
vidence. The investigator should use Judgment and common sense when determining 
where to mark such item(s). He should first consider how an item is normally 


handled and how it may have been handled during the crime. 


The purpose of marking is to enable the investigator to positively identify the 


object at a later date. The markings should be inconspicuously placed, especially 
when th vidence is recovered stolen property and will be returned to the rightful 


owner. By placing identifying marks in inconspicuous locations, 


marring of personal property is avoided. 


When an item of evidence cannot be marked without marring, i 


t is pl 


unnecessary 


aced ina 


suitable container, which is sealed with a cover and then both the 
cover marked for identification. Since evidence such as hair, soil 


cannot be marked, they are also placed in suitable containers, 


sealed and marked. 


container and 


, 


l, and fluids 


which are then 


A carborundum or diamond point pencil is recommended for marking on hard surfaces 
and ink on other items. The investigator then records the marking and its location 


in his notebook. 


Tagging. Tagging further serves to help the investigator to identify evidence. DA 
Form 4002, Evidence/Property Tag, contains pertinent data about the evidence and is 


attached to the article or container (see figure 3-1). 


: 
8 
: 


DA FORM 4002 1 JANUARY 73 


Figure 3-1. DA Form 4002, Evidence/Property Tag. 
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should be done at the crime scene when th vidence is collected. 


The evidence tag should be completed in ink. The tag aids in 
handling of evidence by the evidence custodian and the labora 


Evidence must be tagged before it is submitted to the evidence custodian. It 


the processing and 
tory examiner. Some 


of the information needed to complete DA Form 4002, such as document number or 
MPR/CID sequence number, is extracted from DA Form 4137, Evidence/Property custody 


Document (See Figure 3-2). 


CHAIN OF CUSTODY. The chain of custody begins when an item of evidenc 


is 


collected and maintained until that evidence is disposed of. 
assures continuous accountability. If it is not properly maintained, 


be inadmissible in court. 


The chain of custody 
an item may 


Chain of custody is a chronological written record of those individuals who have 
had custody of the evidence from its initial acquisition until its final 
disposition. Those persons in the chain of custody must be identified on the DA 
Form 4137, Evidence/Property Custody Document, which is initiated when th videnc 


is acquired by the CI Agent. 


Responsibility. Each Individual in the chain of custody is responsible for that 
item of evidence. This includes it care, safekeeping, and preservation while under 
his control Because of the sensitive nature of evidence, an evidence custodian is 


provided copies of DA Form 4137 to assume responsibility for th 


vidence when it 


is not needed by the investigator or other competent authority such as a lawyer 


involved in the investigation. 


acquisition, chain of custody, and disposition of evidence. This form 
referred to as the custody document. It is a multiple-purpose form designed to be 
used as a receipt and record the chain of custody, authority for final 
and witnessing of destruction. The form is normally prepared with an original and 
in ink. (Figure 3-2) 


three copies. Entries should be typed or printed legibly 


Evidence/Property Custody Document DA Form 413. This form is used to record 


is hereafter 


disposition, 


is received from a 


The last or third copy is used as a receipt when evidenc 


person. The original and first two copies go to the evidence custodian. He keeps 
the original and first copy for his records. The second copy is returned to the CI 


Agent for inclusion in the case file. 


Individual blocks on the Evidence/Property Custody Document should cont 


following information: 


UJ 


MPR/CID SEQUENCE NUM 
unit SOP. 


conducting the investigation. 


ER and CID ROI NUMBER blocks are completed 


tain the 


AW local 


RECEIVING ACTIVITY block contains the name of the office or organization 


LOCATION block contains the installation or base where the office or 
organization conducting the investigation is located. 
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NAME, GRADE, AND TITLE OF PERSON FROM WHOM RECEIVED block i 
vidence is received from an individual rather than from a crime scene. When 


evidence is obtained from an individual, the OWN 


When evidence is not received from an individual, an approp 
"crime scene" or "found" is entered in this bloc 


checked. 


s completed when 


ER or OTHER block is checked. 


riate term such as 


k, and the OTHER block 


ADDRESS block holds the address of the individual from whom the evidence is 
obtained. If the evidence is not received from an individu 


annotated "NA". 


scene sketch. 


TIME AND DATE OBTAINED block contains 


r 


time it was acquired by the CI Agent. 


REASON OBTAINED block is completed by the word " 
obtained as possible evidence. 


al, this block is 


LOCATION FROM WHERE OBTAINED block holds the location of the evidence at the 
It may be further augmented by a crime 


Evidence" when the item is 


the military date and 


was acquired by the CI Agent such as "2150, 4 May 90". 


IT! 


Ct] 


M NUMBER block contains a chronological numbering of th 
appearing on the form which corresponds wit 


time th videnc 


evidence tag. Each item should be assigned a separate item 


similar items pertaining to the same invest 


it is advisable to list them as separate items. 


cartridge casings of the same caliber 


tigation are not grouped together, 


An example 


separate items 


th the item number shown on the 


number. When 


would be 


found in separate locations within the 


same room. This will facilitate identification by matching 


the specific item 


number on the evidence custody document with the evidence tag attached to the 


tem. In cases where like items are found at the same pl 


characteristics and condition, 
described. 1 
type of metal or stone (in th 


DESCRIPTION OF ARTICLES block holds a descript 
It is detailed accurately and in detail based upon what is actually observed 
about the object at the time it is acquired. 


The value of articles is never est 


UANTITY block contains the number of items included 


i 
grouped when received by the CI Agent, one entry number is sufficient. 
Q 


especially if the 


The item 


item is va 


"s physical 


lace, but are already 


in each entry. 


tion of each item of evidenc 


luable, are 


timated or lis 


case of jewelry or similar i 
beyond giving color, size, and configuration. For example, 
appearing to be gold is listed as "gold colored metal". Se 


listed whenever possible. The words "LAST ITEM" 
letters after the last item listed. These words are centered on the page and 


are placed 


ted, nor is the 
tems) stated 


an article 
rial numbers are 
in capital 


solid lines are drawn from the words to the margin on each side of the form. 


CHAIN OF CUSTODY block has item numbers, date, released by, 
The first entry under RELEAS 
and signature of the individual from whom the property was 


purpose of change of custody. 


individual 


received by, and 


ED BY is the name 


taker Should the 


refuse or be unable to sign, the individual's name is entered in lieu of 
signatur When th vidence is obtained directly from a crime scene or 
found by the CI Agent, the first RELEASED BY block contains "NA". The first 
entry under RECEIVED BY is the CI Agent receiving the property. The purpose 


of change of custody is described b 
Evidence Custodian". 


or 


there 


"Release to 


riefl 


is a custody change. When 


evidence is also the evidence custodian, 


compl 
custo 


signi 


eted by the custodian 
dy block is, "Received by 


ng through carbons, be sure 


(CI Agent) 


i 


in control of the evidence at that time 


are made on the original DA Form 4137, 


and 


Yr 


This procedu 
the CI Agent init 
the first 
the purpose of 
Evidence Custodian". 
not necessary on all copies of an evidence 
the signat 
and when any change of custody occurs, 


WW 


such as 


Eval 


uation as 


re is 


tially 


receiving 


REC 


KE IV. 


ED 


Evidence" 
Followed each time 
the 

BY bloc 


k is 


An 
custody documen 
ture is legibl 
t is the responsibility of 
to ensure that ent 
and all appropriate copies. 


he change 
iginal si 


BK ct 


1e) 
UC; 


on all 


e 


however, 
copies. 


of 
gnature is 
when 

If 
the person 


ries of the change 


The 


importance of keeping accurate and complete custody documents cannot be 


overe 


mphasized. 


FINAL DISPOSAL ACTION block is used by the evidence custodian and approving 


autho 


no 


rity in making final disposi 


tion of 


rmally be completed by the evidence cust 


the evidence. 
todian prior 


This sectio 


to requesting final 


n will 


disposal authority. However, the CI Agent, initially acquiring the evidence, 
may enter this information in pencil if such disposal action can be 
anticipated. Any penciled entries must be verified by the evidence custodian 
and be printed in ink or typed before requesting approval for disposition. 
The CI Agent assists the custodian's later disposition of the evidence by 
completing this section. This is especially helpful in cases of release to an 
owner when the owner's name does not appear elsewhere on the form. The item number 
and name and unit of the person to receiv vidence ar ntered after the RELEASE 
TO OWNER OR OTHER line, such as "Item 1-Owner-SPC Charles Smith, B Co, 2d Bn, 1st 
Tng Bde". For evidence which will be destroyed, such as controlled substances, the 
item number and method of destruction are indicated, such as "Item 3 - released to 
US Secret Service, Final Disposition". 
FINAL DISPOSAL AUTHORITY is completed when th vidence is of no further 
value. The first portion of this section is completed by the evidence 
custodian, and the second portion is completed by the individual authorized 
to grant final disposal. 
WITNESS TO DESTRUCTION OF EVIDENCE is completed for any evidence destroyed. 
A witness attests to the destruction by placing his name, organization, and 
signature in this section. In the CHAIN OF CUSTODY section, the evidence 
custodian enters the item number of th vidence destroyed, date destroyed, 
and his name and signature. The word "Destroyed" is placed in the RECEIVED 
BY column. 
The location of evidence while in the depository is written in pencil in the bottom 
margin, such as "Safe 1, Shelf 1." The document number, a two-part number, 
assigned chronologically, is reflected in the space provided such as "1-90" and 
represents the first evidence custody document received by the evidence custodian 


for the yea 


r 1990. 


IT0735 


After final disposal of th vidence, the original copy of the evidence document is 
mailed or hand carried to the official who authorized the final disposal. 


A sample of the custody document is shown in figures 3-2 and 3-3. 


EVIBENCE/PRPERTY CUSTOOY DOCUMENT eine sor ee eS 
— ean 


ee a a 


NAME GRADE OF THLE 
revues 


Sean ane OF THLE 


pas rare) nt hee ce 
DA FORM: e137 ice rs On pa 7 wet Bs at ad 


Figure 3-2. DA Form 4137 (continued) . 
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OUR eeene enna me TS CSCLM FERTASEES FO TEE SSE S TATION BOC ONG ce eee 
(2 NO LOR 
a) aemeasy 


STOSEO 4% CVOEMEE 1003 AY OE ORPOSED OF 25 SGOERED ANOVE 9 eteety eres 20 etenel OF OF EG bet C1EE © eEEES 


 aeaow 
qaTeas 70 SUSisucTION GF CuBENeS 


Teg AARELEGR UTED AT Meee cane OR on EE) CUSTROVED BY TE MRENETE 
CRBTODNNL 06 tOY PRERANTE On ted, Rate BOAT O A 


i 


- (sgrmen 


Figure 3-3. DA Form 4137 (Concluded) . 
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EVIDENCE 


G 


LEDGER. This is a bound record book (FSN 7530-00-286-8363) kept by the 


evidence custodian to provide double accountability and to cross-referenced custody 
documents. Ledgers will be destroyed thr years after final disposition has been 
made of all items entered in each ledger. The ledger is prepared with the 


following six columns (see Figure 3-4). 


* 


Document number and date received. Contains the document number assigned 
to the evidence custody document. The date the DA 4137 was received in 
the evidence room is entered below this number. 


MRP number or CID sequence number. The number assigned to the 
investigation th vidence pertains to. For CI officers maintaining their 
own evidence facility, utilize the column IAW local SOP. 


Brief description of evidence. A brief description is entered. Include 
the item number from the DA 4137. 


Date of final disposition. Date th vidence as disposed of, as shown in 
"Chain of Custody" section of DA 4137. When several items are not 
disposed of on the same date, the date of disposition should be shown 
opposite its description. 


Final disposition. A brief note on the means of final disposition is 
entered. 


Remarks. Evidence custodian can record any information he/she thinks is 
necessary. 


Date of 


Document No | CID Seq/| Brief Description Final Final 
Date Received Of Evidence [Disposition | Disposition | Remarks 
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Casine oy 
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Figure 3-4. Evidence Ledger Sample. 


PHOTOG 
presen 
realis 


vidence since it 


RAPHY AS EVIDENCE. A photograph may be valuable as 


ts facts in pictorial form and creates mental impres 
tic than those achieved by words alone. It presents 


sions more vivid and 


vidence more accurately 


than the verbal description and permits consideration of evidence which, because of 


size, 
photog 


Rules 


Pertaining to Photographs as Evidence. In order to 


as evi 
genera 


* 


dence, photographs must have been made in accordance 


1 rules: 


question. 


that the photograph represents 


Nothing must be removed or alte 
the taking of the photograph unless absolutely ne 


The represented object must be material to the ca 


The photograph must be free of distortion. 


red at the scene o 


bulk, weight, or condition, cannot be brought into the courtroom. A 
raph also reduces the need for lengthy descriptions 


and explanations. 


qualify for admissibility 
with the following 


se under trial. 


It must be verified by a person who is personally acquainted with the 
locality, object, person, or thing represented and who is able to state 
the appearance of the subject matter in 


f an incident prior to 
cessary; then, a note 


should be made indicating the reason for the removal or alteration. 


Although not a prerequisite 


should be supported by notes 
provide a description of what the pho 
of the subject; time and date; 
film, lens, and type of camera; 
reason for taking the photo; 


and specific reference to a 


for admissibility as evidence, photographs 
made at the time of photography. The notes 
tograph includes: case number or name 


lighting and weather conditions; plate, 
time of exposure and stop used; specific 


location of the came 
import 


these details may be important during a trial, pa 


photograph is challenged. 
investigator (photographer) 
in figure 3-5. 


= 


The notes should be re 
in format similar to 


ra; compass direction; 


tant objects portrayed. Any one of 


rticularly if the 


tained by the 
the Photo Data Card shown 


Further information on the use of photography is found in appendix A. 
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PHOTO DATA CARD 


Case number: Subject: Photographer: 
Location: Date: 
Time of Day: Weather Conditions: 
Camera: Negative Size: 
Lens (Type): Focal Length: 
Diaphragm Setting: Shutter Setting: 
Film: Filter: 

CAMERA POSITIONS 
A. Comsass Res iire: B. Seren: 
C. Lateral Position: D. Tat: 
Artificial Light Used: Developer: 
Developing Time: Temperature: 
Agitation: Method of Printing: 
Contrast: EnlargerLens: 
Paper: 


Distance between Important Objects in View: 


Description of Area: 


Remarks: 


Figure 3-5. Photo Data Card. 


EVIDENCE TRANSMITTAL. 


Transmittal Methods. 


The method used to transmit evidence to the crime labs depends on the type of 
evidence and how urgently the results are needed. There are thr methods: first 
class registered mail, handcarry, transported by Government carrier. 


Wrapping, Packaging, and Transmitting. 


A package wrapped for shipment to the laboratory consists of evidence from only one 
investigation. Each item of evidence within the shipping container should be in 
its own separate package. Violation of this procedure can result in contamination 
of evidence and problems in chain of custody. 


Pack each item of evidence that will minimize friction and prevent shifting, 
breaking, leaking, or contact with other evidence. Pack in cotton or soft paper 
items that are particularly susceptible to being broken, marred, or damaged. 


Items such as glass fragments, evidence in glass containers, impressions, casts, 
ammunition, bullets, cartridge cases, tablets, and capsules particularly 
susceptible to breaking, should be packed in cotton or soft paper. 


Fingerprints. When evidence is to be examined for fingerprints, each item of 
evidence should be packed in a manner that prevents damage to the fingerprints. 
This is accomplished by fastening the object in the container so it will not shift. 
No other object may come in contact with the object suspected of containing 
fingerprints. Items should be dry before packaging. 


The nature of the evidence will govern the use of warning notices to be affixed to 
the outside wrapper or box, such as “Fragile”, “Expedite”, or “Corrosive”. 


Stains. Items that contain stains, such as clothing with stains of blood or other 
body fluids, should not be placed in airtight plastic containers, 'sweating" and 
moisture accumulation may result within such containers, contaminating the 


evidence. Such items must be dry before packaging. 
Liguids. Liquid evidence, with the exception of explosives, oils, and gasoline, 


should be packed in all-glass, sterile bottles or other containers and sealed with 
wax or other suitable material. 


Small Objects. In general, small solid items, such as bullets, fibers, hair, paint 
scrapings, powder, powder patterns, and threads should be placed upon a piece of 
plain paper; the paper folded. This should be packed in separate pill or powder 
boxes, paper containers or druggist folds and sealed with adhesive tape, wax, or 
other suitable material. 


Paper or String. Documents, string, twine, and rope should be placed in an inner ce 
llophane envelope and an outer manila envelope. Cellophane is not suitable for 


packing any item which will rust or corrode. 
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Materials bearing traces of accelerant 


They should not be sent in plastic bag 
plastic. 


Growing plant material should not be p 
moisture accumulates, making examinati 


s like those recovered in an arson or sabotage 
investigation should be sealed in a vapor tight container such as a mason jar. 
s because accelerants will leak through 


laced in airtight plastic containers as 


on difficult. Growing plants should either 


be dried before shipment or wrapped in 
notified in advance of the shipment. 


Packages containing items of evidence 
while in transit label "Corrosive", "F 
Cool". 


Federal laws prohibit transmitting cer 
is any question of mailing, the neares 


Chemicals, gases, unexploded bombs, de 
explosive or inflammable materials can 


G 


porous paper. 


tonators, fuses, bl 


not be sent by mail. 
items of evidence must conform to the provisions of AR 55-355, 


lasting caps, and other 
Transmittal of these 
Military Traffic 


Movement Regulation; Interstate Commer 
state laws and municipal ordinances. 


planned and must acknowledge receipt o 
details of how the materials are packe 
unpacking those items at the laborator 


ce Commission regul 


ations; 


Before such items are forwarded, the laboratory must be notified 


The laboratory should be 


that require careful or selective handling 
ragile", "Keep Away From Fire", or "Keep 


tain items through postal channels. If there 
t postmaster should be consulted. 


and appropriate 


the shipment is 


f notification. In your notification give 


d. This will reduc 


y. 


the danger involved in 


NOTE: More details can be found in appendix B of this manual or refer to the 


appendix in FM 19-20 for further detai 


Transmittal of Classified Evidence. F 
wrappers should be used: 


ls. 


or transmittal of classifi 


d evidence thr 


* Inner wrapper. The sealed container is wrapped and property sealed. The 
full address and return address of the transmitting agency should be 
appropriate, the notation " 


placed on the wrapper. When 


opened by laboratory personnel only" and the classifica 


are placed on all six sides o 
additional copies of th vid 


vidence-to b 
ion of contents 


f the package. An envelope containing two 


3655, Crime Lab Examination Request, 


wrapper. 


nce receipts, plus two copies of DA Form 


should be affixed 


to the inner 


x Middle wrapper. The package is then wrapped and sealed a second time. The 
except no notation is 


markings are the same as for 
made that the package contain 


the inner wrapper, 
s evidence. 


* Outer wrapper. The package is then wrapped a third time and again sealed. 
The outer wrapper bears only the two addresses; 
handling notation must be made if th vidence is perishable, flammable, 
fragile, explosive, corrodible, or corrosive. 


- 


Submitting Evidence to a Crime Lab. 


however, 


a special 


ring evidence for submission to a crime lab: 


bd DA Form 3655, Crime Lab Examination Request 


completed in an original and two copies. 


investigative case file. 


% Each item of evidence is label 


3655 and packed securely ina 
an envelope or series of env 


envelope. Each item of evidenc 


The following steps must be followed when prepa 


(Figures 3-6 and 3-7), is 


One copy iS maintained in the 


led to correspond with the entries on DA Form 
box. Documentary evidence may be placed in 
lopes which are in turn placed in another 
must be wrapped separately. 


% The box or envelope containing th vidence is sealed with tape or glue. 
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CRIME LAB EXAMINATION REQUEST 
for use of this form, see AR 196-6 the proponent agency is the 
United Stetes Army Criminal Lavestigation Command 
TO (inciude ap code) 


4. SUSPECT (S) Last. “rs: cna male names: 


3. VISTIM (S) (Lost, First and nesdle names) 


8. Other evidence 
Previously Submitted 
Yes No 


9. If “YES” in items, list other suspect, date submitted, unit case and laboratory referral 
oumber. 


Figure 3-6. DA Form 3655, Crime Lab Examination Request. (Continued) 


* 


The sender should place his initials or signature across the sealed flap 


of the inner envelope or across the paper tape used to seal the inner box 
and cover his initials or signature with transparent tape. 
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NOTE: 


= 


document, 


custody document ar 


The original and one copy of DA Form 3655 plus the original evidence 
placed in an envelope, which is sealed and addressed 
to the laboratory with an attention line 


to the specific division 


fingerprint, firearm, and so on). 


evidence. 


= 


via first 


laboratory. 


The sealed envelope is securely taped to 


the box or envelope containing the 


The box containing the evidence is than wrapped in heavy paper and sent 


class or registered mail, express, or hand-carried to the 


If postal or express channels are used, th vidence is 


accompanied by a request for a return receipt from the laboratory (Postal 


Form 3811) 


provisions of AR 380-5. 
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' 
2. 


10 RVOEMEE DURMIT TER 1 wnveeres 


In the case of classified evidence, investigators must comply with the 


= OESCPIF DM Ott Re 


Determine of Exhibit 0 is marituaena and the amount thereof 


Determine If Exnibit 2 conteins LSD or any omer narcotic or controlled substance 


wig the amount thereof. 


Evulence shove has not heen examined by anuther experi in the same scoenvifec ficid. 


z Sa GMA Byse 
a ae a 


Figure 3-7. 


DA Form 3655 Crime Lab Examination Request (Concluded) . 
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Temporary Release of Evidence. Evidence may be removed from the evidence room only 


for permane 
reasons for 


as Tr 
sed Pr 
UC 


The person 


nt disposal or temporary release for specific reasons. The most common 
temporary removal are: 


ansmittal to a crime laboratory for forensic examination. 


esentation at a courts-martial or hearing conducted under Article 32, 
MJ. 


the "Chain 
person rece 
until it is 
release the 
to first cl 
will then p 
vidence is 


vidence is released to will sign for it in the "Received By" column on 
of Custody" section on the original and first copy of DA Form 4137. The 
iving the evidence must safeguard it and maintain the chain of custody 
returned to the evidence custodian. The evidence custodian will 
original DA Form 4137 to the person who assumes temporary custody, or 
ass mail or other transmittal channels, along with th vidence. H 
ut the first copy of the DA Form 4137 in a suspense folder. When the 


custodian a 
document fi 
annotated, 


When items 
agency or p 
above. An 
additional 
recorded on 


Personnel r 


returned, the original DA Form 4137, properly annotated by the 
nd the person returning the evidence, will be put in the evidence 
le. The first (suspense) copy, with the chain of custody properly 
will be refiled with the original DA Form 4137. 


on the same DA Form 4137 must be temporarily released to more than one 
erson at the same time, additional copies will be used and processed as 
ote will be made on the original and first copy indicating that 
copies have been made. The chain of custody for all evidence will be 
the first copy of the DA Form 4137. 


required to 


ceiving evidence, either on a temporary or a permanent basis, will be 
present identification to ensur vidence is only handled by authorized 


persons. 
Transmittal to US Army Criminal Investigation Laboratory (USACIL). Requests for 
USACIL anal 


ysis should be coordinated with and made by the local CIDC elements. 


This wille 
investigati 
will alsoe 
activity as 


Even when C 
USACIL, the 
forms, addr 
unit of the 
Form 3655. 

of evidence 


FINAL DISPO 
after it ha 
Evidence re 
soon aS pos 
made part o 
custodian s 


nsure that items of material value or physical evidence in an 

on are not mishandled, improperly accounted for, or contaminated. It 
nsure USACIL elements are aware of incidents of suspected criminal 
defined in paras 3-1 through 3-3, AR 195-2. 


ID personnel have no direct interest in materials being shipped to 
y can still be of assistance by providing proper laboratory request 
esses, and advice on packaging and transmittal. The date, name, and 
CID representative coordinated with will be entered in Item 11 of DA 
More detailed instructions pertaining to the release of various items 
may be found in AR 195-5. 


SITION OF EVIDENCE. Evidence will be disposed of as soon as possible 

s served its purpose or is determined to be of no value as evidenc 
leased to a trial counsel for judicial proceedings will be returned as 
sible to the custodian for final disposition. If an item of evidence is 
f the record of trial, the trial counsel will immediately notify the 

o the DA Form 4137 can be properly annotated. This will be considered 


final dispo 


sition. 
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When final action has been 
document will be sent to the Staf 
general courts-martial jurisdiction over 
final disposal authority part of 
needed. When evidence must be retained, 
completed; a brief statement giving the reason 


taken in known subject cases, 
Judge Advocate (SJA) of the commander with 
the subject. ] 
the DA Form 4137 if the evidence 
this part of the form will 


the original custody 
The SJA will complete the 
is no longer 

not be 
for keeping the evidence wil 


1 be 


furnished to the evidence custodian on separat 
where there is a high 
isolated units 

approval), ale 
approval. When 
the SJA to make 
disposition app 


that must mail the DA Form 4137 


this method is used, enough 
a decision. The return cor 
roval will be 


att 


Evidence in an investigation fo 
disposed of 3 months after completion of the 


risk of losing the original DA Form 4137, 


ter or memorandum for record may be substitu 
information will 
respondence from 
tached to the original 


r which no subject has b 
investigat 


correspondenc In unusual cases, 

for example, 

SJA for disposition 
for disposition 

be furnished to allow 

the SJA giving 

DA Form 4137 for filing. 


— 


to the servicing 
ted 


n identified may be 


tion without SJA approval; it 


may be disposed of earlier with SJA approval. 
serious crime, 
case, it may be advisabl 


when it is possible a subject may later 


to keep th videnc 


subject is not known, evidence custodians will 
commander, SJA, provost marshal, o 
will be given by completing the final 
Form 4137. 


disposal 


When evidenc 
authority part 
final disposi 


tion of the evidence. 


Items in the evidence room that, aft 
as evidence may be disposed of afte 
possible evidence that are determined 
before being sent to the evidence cust 


Ce 


todian, 


r representative, 


is permanently released to an external agency, 
t of the DA Form 4137 will be completed. 


r laboratory analysis, 
consulting with the proper SJA. 
to have no valu 
may be disposed of by 
immediat 


However, care must be taken with 

be identified. In sucha 
longer than 3 months. When the 
obtain the approval of the 


as 
thorit 


appropriate. This approval 
ty section of the original DA 


au 


the final disposal 
This will be considered 


seem to have no value 
Items of 

by the CI Agent 
the agent; this 


as evidenc 


is done only after consulting with th 
This does not include found controll 
may be obtained followed by written 


approval. 


When it is not practical or desirabl 


led substances. 


supervisor and getting approval. 
In unusual cases, oral approval 


automobil 


serial numbered items, items 
amounts of money, and perishable or unstable it 
immediately. If such items can be immediately 


to keep items of evidence, 
required for use by the owner, undelivered mail, ] 


(eg. les, 
large 
tems) disposal action may be taken 


disposed of, it will not be 


necessary to enter them into 
The SJA will complete the final 
it is not possible to get writ 


e disposal autho 


tten approval of 


the evidence room. 


the SJA before 


This will be coordinated with SJA. 
rity portion of the DA Form 4137. If 
the disposal of the 


evidence, oral permission will be obtained, 


The guidance below on evidence disposal wil 
methods of disposal comes up, the SJA will 


followed by writ 


ll be followed. 
give legal 


tten approval. 


Vhen a legal question on 


advice. 


* 


(1) U.S: 
issued. 


government be 


t property will 


(2) Personal prope 
rightful owner. 


(3) U.S. government 


released to the organization to which 


rty that is legal to own will be released to its 


t treasury checks and money orders from any APO money 


order facility will be returned to the issuing APO. 
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* 


(4) 
check 
If th 


(5) 
canno 


Louis 
numbe 
ident 
will 

posta 


Other types of negotiable instruments (eg. money orders, travelers 
s, and checks) owned by a business firm will be released to the firm. 
e firm does not want them returned, they will be destroyed. 


Except as provided for in (3) above, US postal money orders that 
t be identified as the property of a specific person will be sent to 


the Military Money Order Division, Postal Data Center, P.O. Box 14965, St. 


, MO 63182. A letter of transmittal that has the investigative case 
r, date of final report of investigation, offense, and complete 

ification or both subject and victim will be included. The let 
also state that information on the ROJ. If it is foreseen tha 
1 money orders will be kept as evidence for more than 120 days from 


ter 


cT ct 


the date received by the evidence custodian, a first class letter will be 


sent 
it wi 
the r 
order 


immediately to the Military Money Order Division, Postal Data Center; 
ll list the serial number and symbol number of each money order and 
easons for retention. This may prevent the issue of duplicate money 
Ss. 


Negotiable instruments and other documents obtained from a person 
be retuned, unless the owner does not want them. In this case, they 
be destroyed. 


Known document standards will be released to the agency or person from 


whom received or the rightful owner, unless they are not wanted. In this 


whom received will be destroyed. 


(9) 
perso 
dispo 


(10) 
who i 


they will be destroyed. 


ts 


xemplars and other documents of no value to the person or agency from 


Items of personal property that belong to deceased or missing Army 
nnel will be released to the summary court officer appointed to 
se of the descendent's effects. 


Controlled substances will be destroyed in the presence of a witness 
s a CID Special Agent or in the grade E-6 or above. The witness must 


not be involved in the chain of custody. Destruction will be by burning 
or by a method that will make it permanently useless. 


(11) 
will 
unles 


(12) 


Normally, counterfeit currency and coins, counterfeiting equipment 
be released to the nearest office of the US Secret Service (USSS), 
s the USSS directs otherwise. 


Firearms and ammunition may be disposed of as follows: 


(a) U.S. government firearms and ammunition kept as evidence will be 
returned to the-proper military unit. If the unit cannot be 
identified, they will be released to the installation accountable 
officer, IAW paragraph 2-5, AR 710-2. 
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(13) 


be located, 


(DPDO) 


(14) 


are of 
fragments, 
witness. 


(b) 


released to the nearest office of Alcohol, 


(ATF) Divisions, 


includes firearms and ammunition 
used in committing a crime. 
(Request for Forfeitu 


ATF Form 4631 
offices, must be 


U.S. Treasury Department 

that were 
Governme 
re), av 


filled out and sent to AT 


U.S. 


investigative report. 


When ATF does not accept such weapons, 
supporting DPDO for destruction, 
ATFs refusal 
proper DA Form 4137. 
witness the destruction of weapons at D 
refused by ATF will be released to the nearest ammunition suppl 


M-1. 


point or depot. 


Contraband firearms and ammunition kept as evidence will be 


Tobacco, and Firearms 

(18 USC 924d). This 

used or intended to be 

nt property is excluded. 
ailable at local ATF 

F along with a copy of the 


(c) 


agreed upon date 


(d) 


In oversea ar 
the servicing DPDO. 


as, weapons described a 
The DPDO will demilit 


they will be released to the 
per DOD 4160.21-M and DOD 4160.21- 
will be documented; this will be attached to the 
In all cases, th vidence custodian will 
PDO facilities. Ammunition 
y 


bove will be turned in to 
arize them on a mutually 


. Ammunition described ab 


the nearest ammunition supply point or depot. 


Legal personal weapons impounded for 


must 


Failur 


to register per local laws), 


requirements have 


rightful owner when th 


longer needed as 
When evidence is 
it will be 
per DOD 4160.21 


videnc 


of obvious value and the 


ove will be turned in to 


minor infractions, 
be returned to the 
been met and they are no 


(eg. 


owner is unknown or cannot 


turned in to the Defens 
-M. 


items of evidence found at crime scenes th 


and wooden 
Crushing, 


no obvious value 


burning, 


match books, beer c 
will be destroyed 
or other methods wi 


(eg. 
sticks) 


items useless and harmless. 


(15) 


reasonable attempts, 
A DD Form 1131 
the DD Form 1131 will be attached 


Officer. 


of 


(16) 
into 
tal 


in 
pos 


When the owner of 
the money wil 


Post exchange Items, 


a host country, 
investigations, 


the money is not known o 
1 be turned in 
ection Vouche 


(Cash Coll 


commissary items, 
that are connected with bl 
will be disposed of per-- 


ations. 


(a) iocal regul 


Status of 


forces agreements, 


and 


Law or customs of the host country. 


and items 


Property Disposal Office 


at have no known owner and 
ans, bottles, glass 

in the presence of a 

ll be used to render the 


r cannot be located after 
to a U.S. Army Finance 
r) will be used. A copy 


to the original custody document. 


illegally Introduced 
customs, and 


ack market, 


LESSON 3 


PRACTICE EXERCISE 


n 


The following items will test your grasp of the material covered in this lesson. 
There is only one correct answer for each item. When you have completed the 
xercise, check your answers with the answer key that follows. If you answer any 
item incorrectly, study again that part of the lesson which contains the portion 


involved. 


‘Ty; You have a document containing cryptography, for which you do not have 
the key. What is your action? 


A. Attempt to decrypt the message. 


B. Process it in accordance with the unit standing operating procedures 
(SOP). 


Ce Take it to the nearest cryptofacility for decryption. 


D. Forward it to the CCO. 


ate What are the most common items of physical evidence encountered by CI 
personnel? (Write in your answer) 

oe Which may reveal the sex, approximate height, and weight of an individual? 
A. Fingerprints. 


B. Footprints. 
Cc. Hair. 
4. If the items of evidence are small, is it permissible to consolidate the 


evidence from two or more investigations into one package to ship to the 
laboratory? 


A. Yes. 


Cx No. 
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LESSON 3 


PRACTICE EXERCISE 


Answer Key and Feedback 


Item Correct Answer and Feedback 

ale B. Process it in accordance with the unit standing operating 
procedures. 
(page 3-2). 

2 Documents are the most common items of physical evidence encountered 
by Cl. (page 3-2). 

3s B. Footprints. (page 3-3). 

4. B. No. (page 3-15). 
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APPENDIX A 
CRIME SCENE PROCESSING 


Successful crime scene processing depends upon the investigator's skill in recognizing and 
collecting items and facts that may be valuable as evidence. 


When processing a crime scene, the investigator must: 
. PROTECT the crime scene from destruction or contamination. 
: PRESERVE all items and facts of evidentiary value obtained at the crime scene. 
This includes making sketches and notes; photographing the scene; collecting 
trace evidence and fingerprints; questioning suspects, victims, and witnesses; and 
marking evidence. 


‘s PRESENT the findings made from crime scene processing. This is the purpose of 
protecting and preserving the crime scene. 


The investigator must attempt to reconstruct what actually occurred during the crime, and if 
testifying in court, be able to logically and positively identify all facts and items obtained during 
his investigation. The purpose of this appendix is to acquaint the investigator with— 

: Searching for collectable evidence. 

’ Making investigative notes and sketches. 

: Photographing the crime scene. 

CRIME SCENE PROCEDURE. 

Initial Actions. 

Depending on the type of crime committed and the location, the crime scene is the area 
surrounding the location, to include all direct traces of the crime. The investigator should note 
the name and position of the person notifying him and the time the crime was reported. 

Upon arrival at the scene, the investigator should do the following: 

: Record the date, arrival time, and weather conditions. 

. If an injured person is on the scene, arrange for medica! attention, identification, 
and removal. The scene is disturbed only to the extent necessary to have medical 
aid rendered to the injured or to have a doctor examine a deceased victim. 
Consideration should be given to providing a searched pathway to the victim. 


~ If the offender is at the scene, apprehend him. 
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: If the scene is not fully protected, ensure its protection by using MP or other 
responsible persons to keep curious persons away from the scene and keep 
witnesses, suspects, and victims present from disturbing the scene. It may be 
necessary to reroute traffic or take other action to prevent any disturbance of the 
scene until a complete examination is made. 


Evidence. The body of a deceased victim should not be covered until thoroughly processed for 
evidence. Premature covering could result in destruction or alteration of valuable trace 
evidence. 


Immediate action is taken to protect items of possible evidentiary value that may be destroyed 
by rain, snow, fire, or other causes. For example, a raincoat or piece of canvas may be used to 
cover impressions in the earth that are exposed to rain. Wooden or paste board boxes may be 
placed over impressions in snow. {tems that will melt must be shielded from the sun or other 
heat sources. Objects such as food and blood should be covered to protect them from 
contamination. 


Witnesses. Determine and record the names of persons at the scene who may be witnesses 
and separate them. These persons should be removed from the immediate area of the scene 
as soon as practicable. 


Conduct preliminary questioning of witnesses, suspects, and victims to determine in general the 
extent of the incident or crime. Record all movements made at the scene and what items 
persons have touched. 


Note the names of all persons present. Those present within the immediate area of the scene 
should be only the minimum needed to assist the investigator. It may be necessary to request 
military or other officials present to refrain from examining or disturbing objects or aspects of the 
scene. 


investigating personnel must maintain CONTROL and SECURITY of the crime scene. 


RECORDING. 


The investigator begins the process of recording pertinent facts and details of the investigation 
the moment he arrives at the crime scene. 


He writes down identification of persons involved and what he initially sees. He also draws a 
rough sketch of the crime scene and takes an integrity photograph. This is accomplished to 
ensure that an image of the crime scene is recorded before the scene is disturbed. The 
recording continues for the duration of the crime scene processing. Techniques for recording 
sketches and investigative notes are discussed later. 


SEARCHING FOR EVIDENCE. 
Each crime scene is different, according to the physical nature of the scene and the crime 


involved. Consequently, the scene is processed to develop essential evidentiary facts pertinent 
to the offense. A general survey of the scene is always made, noting the location of obvious 
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to the offense. A general survey of the scene is always made, noting the location of obvious 


traces of the action, probable entry and exit point used by the offender(s), and the size and 
shape of the area involved. 


In rooms, buildings, and small outdoor areas, a systematic clockwise circie search for evidence 
is often initiated. (A counterclockwise or any other systematic movement may be just as 


effective in the search. However, in the interest of uniformity, it is recommended the clockwise 
movement be used). 


EVER WIDENING EVER NARROWING 


Figure A-1. Circle Search. 


The investigator examines each item encountered at the scene to locate anything that may be 
of evidentiary value. He should accomplish the following: 


Give particular attention to fragile trace evidence that may be destroyed or altered 
if it is not collected immediately. 


If any doubt exists as to the value of an item, treat it as evidence until proven 
otherwise. 


Ensure each item or area where latent fingerprints may be present is closely 
examined and action taken to develop the prints. 


Carefully protect any impressions of evidentiary value in surfaces conducive to 
making casts or molds. Photograph the impression and make a cast or mold. 


Note stains, spots, and pools of liquid within the scene and treat them as evidence. 
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- Note any peculiar odors emitting from the scene. 


* Treat as evidence all other items, such as hairs, fibers, and earth particles foreign . 
to the area in which they are found. This includes scrapings under the victim's 
fingernails. (Small bags, used to cover the hands of deceased victims, would 
prevent loss or destruction of trace evidence.) 


" Continue systematically and uninterruptedly to the conclusion of the processing of 
the scene. The search for evidence is initially completed when, after a thorough 
examination of the scene, the rough sketch, necessary photographs, and 
investigative notes have been completed and the investigator has returned to the 
point from which the search began. Further search may be necessary after the 
evidence and the statements obtained have been evaluated. _ 


In large outdoor areas, it is advisable to divide the area into strips about 4 feet wide. The 
search starts at one end and moves back and forth across the area from one side to the other. 
A grid search takes place after a strip search is completed. It covers the area in a similar 
manner, but from end to end. 


Figure A-2. Strip Search and Grid Search. 


indoor or outdoor areas may also be divided into zones or sectors, which are searched as 
individual areas (see two examples in Figure A-3). 
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it may be advisable to make a search beyond the area considered to be the immediate scene of 
the incident. If so, persons needed to accomplish the search may be secured from an MP or 


other available unit. 


1. - Immediate area of 
importance. 

2. - Contiguous areas. 

3. - Other areas. 


Figure A-3. Zone or Sector Search. 


All persons participating in the search must be thoroughly briefed as a minimum on the 
following points: 
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First: A full description of the item(s) being sought. 


Second: All information available as to how the item(s) may have been hidden or 
discarded. . 


Third: The action to be taken when the item(s) is/are found. The searchers should be 
emphatically informed that when they discover an item believed to be the one being 
sought, or one similar, they should immediately notify the investigator in charge of the 
search, refrain from touching or moving the item and protect the area until the 
investigator arrives. 


After completing the search of the scene, the investigator examines the object or person 
actually attacked by the offender. For example, a ripped safe or desk drawer that has been 
opened would be processed after the remainder of the scene has been examined for traces of 
the offender. 


COLLECTING EVIDENCE 


Collecting evidence at a scene is usually accomplished after the search has been completed, 
rough sketch finished, and photographs taken. !t may be advisable under certain conditions to 
collect various fragile items of evidence as they are found. Those items that would impede 
further search should be collected when they are located and depicted on the sketch. The 
essential factor is that evidence be carefully and properly collected. 


The investigator must handle evidence as little as possible. Rubber gloves may be used. See 
table 1 for recommended methods of handling specific items that may be collected at a scene. 
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Items 


Handguns 


Paper, money, documents, paper 


Broken glass 


Dried stains on smooth surface 
furniture 


Bottles, jars, drinking glasses 


Bullet 


Cartridge case 


Dried stains on a floor 


Table |. Recommended Methods for Handling 


Crime Scene Items. 


Method 


Use your fingers on the knurled grip. Do not 

touch smooth grips of smooth metal parts. Use the 
tip of the grips. Do not touch the magazine base of 
pistols. Place in a box bracing the weapons at the 
front and rear. 


Use tweezers. Do not place tweezers over any 
obvious smudge. Place each item in a clean 
envelope or bag. 


Use your fingers on the edges of larger pieces. Do 
not touch flat surfaces. Use tweezers on pieces 
too small for your fingers. Do not grasp at points 
of any obvious smudges. Wrap pieces individually 
in clean tissue, place in a rubbing box, and 
stabilize to prevent rubbing, shifting, or breakage. 


Collect portions of furniture bearing surfaces of 
of furniture stain in original patterns, if possible, 
otherwise, scrape with pocket knife or putty knife, 
removing as little of the finished surface as 
possible. 


Insert two or more fingers into large mouth 
vessels. Place the index fingers on the top and 
bottom of small mouth vessels. Do not 
contaminate or spill any substance in the vessel 
that may be of evidentiary value. 

Use your fingers or tweezers with taped ends. 
Avoid damage to rifling marks on the 
circumference. Place in a pillbox. 


Pick up at the open end with tweezers. Avoid 
scratching. Place in a pillbox. 


Collect portion of floor bearing stain in original 
pattern, if possible; otherwise, remove by gouging 
deeper than the stain with putty knife, wood chisel, 
or other necessary tool. Place in pillbox or larger 
similar container. 


If the investigator touches a piece of evidence in a manner that leaves his fingerprints on the 
article, he indicates this fact in his notes and informs the laboratory personnel if they make an 
examination of the evidence. The investigator's and the victim’s fingerprint cards should be 
forwarded with latent prints to decrease delay of latent identification. 
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tt may be necessary to damage, partially destroy, or otherwise decrease the effectiveness of an 
article to collect important evidence. For example, it may be necessary to cut the upholstery on 
a piece of furniture to obtain an area stained with blood or to cut out a section of a wall to collect 
fingerprints that cannot be collected by other means. Such action is based on the merits of the 
individual case. A door or window may be removed from a building to have it processed ata _ 
laboratory or held as evidence. 


The investigator should ensure necessary measures are taken to protect the contents of a 
building or room from which a door or window is removed. 


When collecting evidence at the scene for laboratory analysis, the amounts needed will depend 
upon the type of evidence and the test to be conducted. 


For proper evaluation of a stain by laboratory technicians, control samples should be submitted 
in addition to the collected stains. For example, a stain, soil, or porous surface is collected by 
dipping or gouging beneath the stain. Unstained portions are also collected and identified as 
control samples. The integrity of control samples is preserved as carefully as that of evidence. 


Marking Evidence for Identification. 


The investigator places his initials, date and time of discovery of each item of evidence, so it 
can be identified by him at a later date. These marks should be placed on the item of evidence 
as soon after discovery as is feasible and in a place least likely to affect the appearance, 
monetary, or evidentiary value of the item. Evidence that cannot be marked should be placed in 
a suitable clean container, sealed, and the identifying marks placed on the container. The 
investigator makes appropriate notes, to include a description, in his notebook at the time the 
evidence is marked. 


in instances in which several items with the same appearance are collected, the investigator 
places an identifying number on each item and indicates, by that number, in his notes and on 
the sketch where each item was found. 


if a bullet, a knife, or other item on which the investigator would normally place his initials 
cannot be marked in the recommended manner, the item is placed in a suitable container and 
the container is marked for identification. 


Additional information on marking evidence can be found in lesson 3 of this subcourse. 


GENERAL EVIDENCE PROCESSING. 


Tagging evidence. Physical evidence the investigator obtains must be tagged prior to its 
submission to the evidence custodian. This action should take place at the scene of the crime 
when the evidence is collected, at the place of receipt, or as soon thereafter as possible. The 
tag serves as an aid in the processing and storage of evidence (see lesson 3). 


Evaluating evidence. Frequently, the successful conclusion of an investigation depends on an 


accurate evaluation of the evidence. Each item of evidence must be evaluated in relation to all 
other evidence, individually and collectively. 
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The investigator's evaluation of evidence begins with the first information received conceming 
the incident or crime and continues until the investigation has been satisfactorily concluded or 
discontinued by proper authority. The evaluation may include a discussion of the evidence with 
supervisors, other investigators, laboratory technicians, or other experts in a given field. 


Preserving evidence. It is the investigator's responsibility to ensure every precaution is 
exercised to preserve physical evidence in the state in which it was received until it is released 
to the evidence custodian. 


Preservation includes security and chain of custody. A key-type field safe should be made 
available to the investigator for temporary storage of evidence during other than normal duty 
hours (see lesson 3). 


Beleasing evidence. Once in the investigator's possession, evidence is released only to the 
evidence custodian or another person designated by the investigator's supervisor. 


Releasing the scene. The scene is not released until all processing has been completed. The 
release should be affected at the earliest practicable time, particularly in instances in which an 
activity has been closed or its operations curtailed. 


Sketct ‘ipenioaive Notes: 


Properly prepared sketches may be used to question witnesses, suspects, and victims; to 
prepare a report of investigation; and to present information in court. 


They are also valuable sources of information for both trial and defense counsels. Sketches 
are frequently introduced in court as evidence and used to acquaint the court with crime scenes 
and help witnesses orient themselves as they testify. Sketches and notes made during an 
investigation become DA property and are not retained or used as personal property. 


Notes or sketches used to refresh the investigator's memory during a court appearance may be 
reviewed by the court. Appropriate attention is given to ensure all notes and sketches are 
legible and project clear, meaningful facts. Lack of organization in notes or sketches could 
adversely influence the weight given to the investigator's testimony by a court. 


Sketches. A sketch which graphically portrays the scene of a crime and items within the crime 
scene is of interest to the investigation. The sketch, crime scene photographs, and 
investigative notes are complementary and necessary to effectively process the crime scene. 


The sketch provides the best means of portraying distances between objects at the scene. 
There are two basic kinds of sketches, the rough sketch and the smooth sketch (scaled 
drawing). Both types of sketches contain the same general information, but differ according to 
the technique of presenting the information. 


To cover items of interest to the investigation, crime scene sketches must, as a minimum, depict 
the following: 


* Locations of approaches, such as roadways, paths, entrances, exists, windows, 
and skylights. 
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* — Size of the area or building. 
* Exact locations and relative positions of all pertinent evidence found at the scene. 
* Camera locations. 

In depicting the above, the sketch should: 


* Each sketch should have a caption to identify the illustration. (eg. “Rough 
sketch showing camera positions and distances.)" 


* Reflect accurate measurements verified by another person. 
* indicate compass direction of north. (Located on top of the scale bar) 


* Designate the scale (for scaled drawing only). If no scale is used, state this fact. 
(Located in bottom center) 


* Use a conventional system of measurement (English or metric system). Paces or 
steps are not used. 


* Must contain a legend located in lower left position that explains all symbols or 
letters used to identify objects on the sketch. Military symbols are used where 


practicable 


* — Each sketch must have a sketch title block, located in the lower right portion that 
depicts the report or incident number, offense alleged, name and rank or title of the 
victim, scene (portrayed - citing room number, bldg number, and type of building, 
location (citing complete name of installation, city, state, zip code, date and time 
the sketch was started, and the name and rank or title of the persons who made 
and verified the sketch. 


Rough sketch. The purpose of a rough sketch is to portray information accurately, not 
necessary artistically. A rough sketch is. usually not drawn to scale. But it must show accurate 
distances, dimensions, and relative proportions. The rough sketch is filed with the copy of the 
report retained by the originating office. 


More than one sketch can be made of a particular scene. One may reflect measurements; 
another camera positions; and a third may be required to show locations of items of physical 
evidence at the scene. In some instances, separate sketches may be the best way to record 
multiple scenes contained within a larger area of investigative interest, or to provide detailed 
depictions of isolated locations within a relatively small crime scene. Conditions may 
necessitate the sketching of a limited area within the crime scene. 
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30°x 28" 
SAFE 


FILING 
CABINET 


28"x 20" 


68" 
[$< — — << i 


LEGEND TITLE 
(@=crowearR ROI(OR MPR) # = (FIELD SAFE) 
HOUSEBREAKING 0800 | FEB %2 
| RM #4 BLOG 3972 
N “Nor ro scace ie raise aa 


ORAWN GY: S.A. SMITH 
VERIFIEO BY: CPT JAMES WALTERS 


Figure A-4. Rough Sketch, Showing Evidence 
Measurements and Triangulation. 


A-11 IT 0735 


FILING 
CABINET 


LEGEND: TITLE: 


(a) - Crowbar RO! (OR MPR) # 
Housebreaking, RM # 4, Bldg 3972 


NOT TO SCALE Ft. Blank, AL 


DRAWN BY: CW3 Albert French 
Finished Sketch VERIFIED BY: 


Figure A-5. Smooth Sketch. 
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Figure A-6. Cross-Projection Sketch. 


items necessary to prepare a rough sketch are as follows: 
* Soft lead pencil. 


* Bond paper or graph paper. 


* Several thumbtacks to hold one end of the steel tape down when you're working 
alone. 


* Clipboard large enough to form a back for the paper. 

* Steel tape (at least 100 feet long). 

* A straightedge ruler. | 

* Amagnetic compass. 
Smooth sketch. A smooth finished sketch is a more finished version of a rough sketch, using 
the information provided in the rough sketch. A smooth sketch need not be drawn by the same 
person who draws the rough sketch. But whoever draws the rough sketch must verify the 
accuracy of the smooth sketch if made by an experienced draftsman. When drawn to scale, the 
sketch need not include figures to show distances. If not drawn to scale, this fact should be 
indicated on the sketch and distances should be shown as on a rough sketch. A copy of the 
finished sketch is appended to each copy of the investigative report. 


if the finished sketch is prepared by investigative unit personnel, the following materials are 
considered necessary: 


* Drawing board or table. 

* Draftsman T-square. 

* Pencil and ink drawing compass. 
* Ink ruling pen. 

* Lettering and drawing pens. 

* Black india ink. 

* Drawing and tracing paper. 

* Architect scale. 

* Art gum and ink erasers. 


* Engineer or architect triangles. 
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* Drawing pencil. 
* French curve. 


. Across-projection sketch may be used to add another dimension to 
sketches. It is useful when items or locations of interests are on or in wall surfaces in an 
enclosed space. The walls, windows, and doors in a cross-projection sketch are drawn as 
though the walls had been folded out flat on the floor (see Fig A-6). 


Various sketch methods may be used to locate evidence and other important items at the 
scene. The simplest form of a sketch is a two-dimensional presentation of a scene as viewed 
directly from above. Evidence is located on this type of sketch by triangulation. Triangulation is 
used for indoor and outdoor sketches having fixed reference points. Objects are located by 
creating, a triangle of measurements from a single, specific, identifiable point on an object to 
two fixed points, ail on the same plane, at the scene. If movable items are to be used as 
reference points, they must first be “fixed” themselves. Do_not triangulate evidence to 
evidence. Do not triangulate under or through evidence. Do not take a line of measurement 
through space. Measure your line along walls, or table top: In the interest of clarity, keep the 
angle of triangulation measurement between 45 and 90 degree on the sketches. 


Regulator shaped items are fixed by creating two separate triangles of measurements. Each 
originates at opposite points on the object and ends at two fixed points, in the same plane, at 
the scene. 


Pliable objects are fixed by creating a single triangle of measurement from the center of mass of 
the object to two fixed points, on the same piane, at the scene. You also measure the longest 
and widest dimension of the object. 


inhibited outdoor areas usually have easily defined, fixed reference points such as buildings, 
edges of roads, and sidewalks. When these are present, the triangulation method can be used 
to establish the location of objects. But uninhabited or remote areas may not have easily 
defined, fixed points will have to be located by using the intersection-resection method taught in 
map reading. See FM 21-26 for more discussion on intersection-resection. 


INVESTIGATIVE NOTES. 


Investigative notes are prepared for use in recalling places, events, incidents or other pertinent 
facts. They are filed with the copy of the report retained by the originating office. 


Basic Principles of note taking are: 


* Notes should be printed or made in legible handwriting, preferably in ink. The ink 
should not smudge easily. 


* Each page of notes should be identified with the investigator's name, the case 
number (when known), and the date. 
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* Short phrases should be used; single words or shorthand notes may not be 
meaningful at a later date or to other persons. 


* The first notes recorded after a compiaint is received should include the date and time 
the complaint or information was received, name of the person reporting the 
information, names of the accused or suspected person(s), exact location of the 
incident, and a brief account of the details received. A complete identity of each 
person should be recorded when he is first mentioned. 


Notes should be made when an action is taken, when information is received, and when an 
event is observed. However, the investigator should not allow his note taking to adversely 
affect the questioning of a person who may be distracted by such action and subsequently 
withhold information. 


Notes should indicate a detailed description of any item consigeres to be pertinent to the 
investigation. This includes: 


* Unusual or peculiar marks of identification. 


* The exact location where the item was found and the relative distances separating 
various items. 


* Trade names, and serial and model numbers. 
* The recording of all identifying marks placed on the item. 


Notes should indicate action taken by the investigator that may have a bearing on evidence 
obtained or significantly affect the investigation. 


Notes should identify each photograph taken of a scene. They should be accurate and 
complete, since they form the basis for the preparation of the formal investigative report. The 
investigator may also use the notes to refresh his memory if he appears as a witness in a court 


proceeding. 


Notes should not be edited or erased. If a mistake is made, the entry should be lined out, 
initialed, and then rewritten. 


Crime Scene Photography. 
One of the most valuable aids to a criminal investigation is provided by photographs. When 


property taken, photographs supplement notes and sketches, clarify written reports, provide 
identification of personnel, and provide a permanent record of fragile perishable evidence. 


The most important rule in crime scene photography is to photograph ail evidence or possible 
evidence before anything is moved or touched. 


Genera! Considerations. Maintaining perspective is the most important consideration in crime 
scene photography. Photographs that nearly duplicate the exact scene with respect to scope, 
position, color, and form are the most useful. 
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Time is also an important consideration. Fragile trace evidence subject to nature (such as a 
footprint in the rain and fingerprints) should be photographed prior to any other processing. 


There should not be any extraneous objects in the photographs such as investigators, their 
clothing, or equipment. Notes should be taken of the type of camera and film used, 
photographs taken, and any information necessary for the photographers to be able to answer 
"Yes" to the question, "Does this photograph represent the scene as you saw it?" 


if it has been determined an explosive was used and there is residue of explosives in the area, 
a flash attachment should not be used. 


When necessary, all objects should be photographed from different angles to ensure complete 
coverage. Evidence flags are useful in marking the location of small items of evidence for a 
photograph. 


aN 


A piece of cloth, preferably white Wire, stiff enough to hold Co 
: ’ mpl . 
large enough to be ina photograph. cloth in Seeical for pec svience 29 


photograph. 


Figure A-7. Evidence Flag. 


When pertinent, photographs should be taken of the general scene, approaches to the crime 


scene, surrounding areas, closeups of the entrance and exit locations, or those routes most 
likely used. 


Special Considerations. 
Arson scenes. There are several special considerations in photographing a fire. The 


photographer should seek out various possible angles from which to take photographs, 
attempting to keep out of smoke-filled areas. 
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Photographs of the entire structure should be made first. Color film should be used to show the 
color of the smoke, flames, and vapors. A series of photographs taken at intervals of several 
minutes may show the intensity and direction of the fire. Photographs should be made of any 
spectators at a fire, because the perpetrator may be present watching the results of his efforts. 
After the fire, the entire exterior of the structure should be photographed. Following this, all 
affected interior areas should be photographed, to include any evidence discovered. 

Suspected points of origin should be photographed in detail. Since the photographer cannot 
rely on his exposure meter when trying to photograph charred wood, two or three stops 
overexposure will be required. 


ARSON: DURING FIRE 
© Various angles 


© Color photo of entire structure first (include 
smoke, flames, and vapor) 


© Series taken at intervals of several minutes 
© Spectators 
ARSON: AFTER FIRE 
Entire exterior 
Affected interior areas 


All evidence 


Suspected points of origin 


Figure A-8. Photographing the Arson Scene. 


Qther evidence. Various items of evidence should be specifically photographed. This evidence 
should normally be located in an overall view of the crime scene. Next, a medium-range shot 
should be taken of the object to show its surrounding area. A third, closeup shot of the object 
should be made to show any peculiarities, followed by the same shot with a ruler in the picture 
area. 
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crime scene, surrounding areas, closeups of the entrance and exit locations, or those 
routes most likely used. 


Special Considerations. 


Arson scenes. There are several special considerations in photographing a fire. The 
photographer should seek out various possible angles from which to take 
photographs, attempting to keep out of smoke-filled areas. 


Photographs of the entire structure should be made first. Color film should be used to 
show the color of the smoke, flames, and vapors. A series of photographs taken at 
intervals of several minutes may show the intensity and direction of the fire. 
Photographs should be made of any spectators at a fire, because the perpetrator may 
be present watching the results of his efforts. 


After the fire, the entire exterior of the structure should be photographed. Following 
this, all affected interior areas should be photographed, to include any evidence 
discovered. Suspected points of origin should be photographed in detail. Since the 
photographer cannot rely on his exposure meter when trying to photograph charred 
wood, two or three stops overexposure will be required. 
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1 


B- 


APO 

ATF 

BW 

CBW 

CCF 

Cl 

Cll 

CciDC 
CINCUSAREUR 
CONUS 

CW 
DCSINT, DA 
DIS 

DPDO 
EUSA 

EW 


UCMJ 
USACIL 
USAIRR 
USAREUR 
USSS 


APPENDIX C 
ACRONYMS 


Army Post Office 

Alcohol, Tobacco, and Firearms Division 
Biological Warfare 

Chemical, Biological Warfare 

Central Personnel Security Clearance Facility 
Counterintelligence 

Counterintelligence Investigation 

Criminal Investigation Division Command 
Commander in Chief, United States Army, Europe 
Continental United States 

Chemical Warfare 

Deputy Chief of Staff for Intelligence, Department of the Army 
Defense Investigative Service 

Defense Property Disposal Office 

Eighth US Army 

Electronic Warfare 

Federal Bureau of investigation 

Foreign Counterintelligence Activity 

Intelligence and Security Command 

Intelligence, Security, and Electronic Warfare 
Major Army Command 

Military Police 

Military Personnel Records Jacket 

Military Police Report 

Nuclear, Biological, and Chemical 

Naval Criminal Investigative Service 

Office of the Deputy Chief of Staff for Intelligence 
Office of Special Investigations, Inspector General 
Personnel Security Investigation 

Sensitive Compartmented Information 

Staff Judge Advocate 

Standing Operating Procedures 

Uniform Code of Military Justice 

US Army Criminal Investigation Laboratory 

US Army Intelligence Records Repository 
United States Army, Europe 

US Secret Service 
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